Faces, voices and funds. Handled like it matters.
Rubi records the most sensitive moment of your relationship with a trader. Here is exactly how that data moves, where it lives and when it disappears.
Five hops, all encrypted.
Trader browser
Webcam, microphone and screen recorded in 10 s chunks, uploaded over TLS to presigned URLs.
interview.rubikyt.comRubi API
Authenticates every call, scopes it to your organization, writes the audit log.
api.rubikyt.comWorkers
Assemble media, transcribe, run deterministic floors and the AI report.
private networkStorage and streaming
Encrypted object storage, signed playback that expires in minutes.
CloudflareYour team
Reviews in the dashboard with role based permissions.
cockpit.rubikyt.com
What protects your data
Encryption in transit
TLS 1.2 or later on every surface, HSTS preloaded on our domains. Connectors refuse non HTTPS base URLs.
Encryption at rest
Databases, backups, object storage and integration credentials are encrypted at rest. API keys are stored as SHA-256 hashes.
Tenant isolation
Every record carries its organization and every query is scoped to it. The AI learning memory is built per firm and never mixed.
Least privilege
Four roles and sixteen permissions. API keys only carry the scopes you grant and can never manage members, keys or billing.
Signed media
Recordings are served through short lived signed URLs. Share links are opt in, time boxed and revocable.
Audit log
Actions by users, API keys, the system and traders, with the entity, metadata, IP and time, filterable and exportable.
You choose how long we remember.
Retention is configurable per organization. When a period ends, media is purged and the session record goes with it. Deleting an interview removes it immediately.
Sessions, transcripts and reports by default
Video and audio recordings by default
Who helps us run Rubi
We notify customers before adding a subprocessor that handles interview data.
| Provider | Purpose |
|---|---|
| Render | Application hosting and background workers |
| Neon | Managed Postgres database |
| Cloudflare | Object storage, video streaming, CDN and DDoS protection |
| Anthropic | Language model for the interviewer and the report |
| OpenAI | Speech to text and text to speech |
| Speech and chart analysis models | |
| Deepgram | Caption timing for recordings |
| Simli | Optional live avatar for the interviewer |
| Clerk | Dashboard authentication and organizations |
Running a security review?
Write to security@rubikyt.com for our questionnaire answers and DPA.