Your data

What it is

Every business on Rufio gets its own separate, private setup — not a shared pool of data with other businesses sitting behind the same wall. Your customers, jobs, money, and messages are stored separately from every other business using Rufio, with their own separate storage and their own separate protection. That isn't a future promise: it's how Rufio has been built from the start, not something planned for later.

The data itself belongs to you. It isn't training data, it isn't pooled with anyone else's business, and it leaves with you if you go.

How it works

Where it lives. Your business's information is kept apart from every other operator's, with its own storage and its own encryption keys. Most software you've used puts every customer on one shared system, so a breach anywhere on that system can reach everyone on it. Rufio doesn't work that way: if another business's setup were ever compromised, that wouldn't give anyone a path into yours, because there's no shared system underneath for the breach to spread across.

How it's protected. Everything stored is encrypted using AES-256, and everything moving between your phone or browser and Rufio is encrypted using TLS 1.3 or newer, so a message or an invoice can't be read in transit even if someone intercepted it. Inside your account, access is role-gated — different people on your team can be given different levels of access, rather than everyone sharing one all-access login. A technician doesn't need the same reach into the business as the person who runs it.

Who else can reach it. A small number of outside companies provide pieces of what makes Rufio work — sending text messages, processing card payments, running the AI itself — and each one is contractually limited to using your data only for that stated purpose. None of them get a general window into your business; they see the slice their job requires, and nothing more. On Rufio's own side, access to the systems your business runs on is restricted to authorized staff and requires more than a password to get in.

What gets recorded. Every action Rufio takes on your behalf is recorded: what happened, when, why, and which records changed. That trail exists whether the action was something small, like drafting a message, or something that touched money or the schedule. If you want to know why something looks the way it does, the record is there to check — it isn't a matter of trusting that the AI got it right.

Getting it back out. Your customers, invoices, records, and documents export in standard formats whenever you want them, with no request form and no fee. Your business isn't held hostage by its own software — if you decide Rufio isn't for you, you leave with everything you put in, not a subset of it and not a version you have to fight for.

Boundaries

This page covers where data lives, who can reach it, and what's recorded — it doesn't cover how much Rufio is allowed to do with that data on its own before checking with you. That's a separate question, set per task; see Autonomy levels.

It also doesn't restate the handful of things Rufio will never do or can't do at all — see Limits and boundaries for those, and What Rufio is for what the connected environment described here actually is.

Related

• Limits and boundaries — including the rule that Rufio never shares your business with anyone else
• Autonomy levels — how much Rufio does with your data on its own, task by task
• What Rufio is — the connected business environment this data lives inside