{"id":3566,"date":"2025-08-08T15:44:29","date_gmt":"2025-08-08T15:44:29","guid":{"rendered":"https:\/\/new.rithum.com\/?page_id=3566"},"modified":"2025-08-08T15:44:29","modified_gmt":"2025-08-08T15:44:29","slug":"rithum-security","status":"publish","type":"page","link":"https:\/\/www.rithum.com\/rithum-security\/","title":{"rendered":"Rithum Security"},"content":{"rendered":"\n
\n
\n
\n
\n

\n Rithum Security <\/h2>\n
\n

At Rithum, we understand the importance of our customer data and we are committed to providing a highly secure and reliable platform you can trust. We combine enterprise-class secure development and operations to build security into our software and underlying infrastructure.<\/p>\n <\/div>\n

\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n
\n
\n
\n
\n \n
\n
\n

\n Application Security <\/h3>\n
\n

We follow industry standards, such as the OWASP Top 10 and best practices for our technology stack, to build security into our platform during development and testing. In addition, Rithum engages with third-party security experts to perform web application penetration testing on a regular basis. Rithum clients are isolated from each other through a robust application security model at the request and session levels.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Data Protection & Privacy <\/h3>\n
\n

To assist companies in selling and advertising their products online, Rithum may collect personal data on our customer\u2019s behalf. We maintain technical and organizational processes and protections for personal data in compliance with the regulatory regimes under which Rithum operates, including the EU\u2019s General Data Protection Regulation and the California Consumer Privacy Act. Personal data is retained only as long as needed to perform our contractual obligations, or for other legitimate business reasons.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Availability <\/h3>\n
\n

Rithum\u2019s continuous delivery approach to application development means we can deliver changes and upgrades to our applications without impact to availability. Rithum uses a suite of monitoring tools to monitor the availability of its services and provide real time alerting to our teams in the event a service becomes unavailable. In addition, we monitor systems for resource utilization to avoid negative impacts on service availability.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Access Control <\/h3>\n
\n

Rithum allows customers to create unique, individual logins and manage the access level for users in their organization. Customers have the ability to define role and group based access controls in our system. Customers also have the ability to use Multifactor Authentication (MFA) or Single Sign-On (SSO).<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Data Encryption <\/h3>\n
\n

Rithum encrypts all personal data in transit using industry accepted secure protocols and encrypts data at rest with AES encryption.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Security & Privacy Training <\/h3>\n
\n

All Rithum employees receive security and data privacy training on an annual basis.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Vulnerability Management <\/h3>\n
\n

Rithum monitors industry security alerts, software and system patches, and other relevant updates via industry alert subscription lists. Rithum also monitors security alerts from vendors and partners and scans applications, systems, networks and code regularly. The necessary updates or patches are applied to the system with priority based on the severity of the issue.<\/p>\n

Rithum does not participate in Bug Bounty programs, but welcomes responsible disclosure from clients and partners, who can submit reports to us via their normal support channels.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Physical Security <\/h3>\n
\n

Rithum\u2019s production servers are located in co-located data centers and cloud service provider environments. The facilities have relevant industry certifications and provide state-of-the-art network operations centers, advanced security and monitoring systems, sophisticated fire suppression systems and redundant utility transformers, generators, automatic transfer switches, main switch panels, and uninterruptible power supplies. All services are geo-redundant.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Perimeter Defense <\/h3>\n
\n

Rithum\u2019s team has installed redundant firewalls and intrusion detection systems to monitor and protect the network perimeter. Logs are continuously monitored with automated alerting for security, performance, and availability.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Operating Systems and Subsystems <\/h3>\n
\n

Rithum protects its operating systems by hardening production servers and enforcing strong authentication and authorization for access. Operating systems are strengthened by regular patching, scanning, security configuration and monitoring.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n External Audits and Penetration Tests <\/h3>\n
\n

Rithum completes an annual SOC 2 Type II audit. The report may be requested from your representative. Penetration tests are conducted at least annually.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n Artificial Intelligence <\/h3>\n
\n

All production AI\/ML models and services developed, owned, or licensed by Rithum are self-hosted in a multi-tenant cloud environment (AWS). Each client\u2019s data is logically separated within the system, and data storage is fully segregated to ensure security and compliance. The AI\/ML models use a combination of natively-generated data (such as listings transformations, user feedback, taxonomy definitions) and external data inputs (customer provided catalogs). No third-party AI\/ML sub-processors are used for the relevant services, and client data is not used for training shared models.<\/p>\n <\/div>\n <\/div>\n <\/article>\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n

\n
\n
\n
\n

\n Compliance and Attestations <\/h2>\n
\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n
\n
\n
\n
\n \n
\n
\n

\n Cloud Security Alliance <\/h3>\n <\/div>\n
\n \"\" <\/div>\n <\/article>\n \n <\/div>\n
\n \n
\n
\n

\n AICPA SOC <\/h3>\n <\/div>\n
\n \"\" <\/div>\n <\/article>\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n\n
\n
\n
\n
\n

\n Security and Data Privacy Standards <\/h2>\n
\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/section>\n\n
\n
\n
\n
\n \n
\n
\n

\n GDPR <\/h3>\n
\n

Rithum has taken all necessary steps and maintains processes and protections for personal data in compliance with the General Data Protection Regulation of the European Union (\u201cGDPR\u201d). For information on how Rithum complies with the GDPR, please visit the GDPR FAQs. <\/p>\n <\/div>\n \n GDPR FAQs <\/a>\n <\/div>\n <\/article>\n \n <\/div>\n

\n \n
\n
\n

\n CCPA <\/h3>\n
\n

Rithum does not sell personal data and our data handling practices comply with the California Consumer Privacy Act (\u201cCCPA\u201d). For information on how Rithum complies with the CCPA, please visit the CCPA FAQs.<\/p>\n <\/div>\n \n CCPA FAQs <\/a>\n <\/div>\n <\/article>\n \n <\/div>\n <\/div>\n <\/div>\n<\/section>","protected":false},"excerpt":{"rendered":"","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"template-page-tier3.php","meta":{"_acf_changed":true,"inline_featured_image":false,"footnotes":""},"coauthors":[],"class_list":["post-3566","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nRithum Security | Rithum<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rithum.com\/rithum-security\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Rithum Security\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rithum.com\/rithum-security\/\" \/>\n<meta property=\"og:site_name\" content=\"Rithum\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/rithumcommerce\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@rithumcommerce\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"vict0ri4\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.rithum.com\\\/rithum-security\\\/\",\"url\":\"https:\\\/\\\/www.rithum.com\\\/rithum-security\\\/\",\"name\":\"Rithum Security | Rithum\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.rithum.com\\\/#website\"},\"datePublished\":\"2025-08-08T15:44:29+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.rithum.com\\\/rithum-security\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.rithum.com\\\/rithum-security\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.rithum.com\\\/rithum-security\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.rithum.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Rithum Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.rithum.com\\\/#website\",\"url\":\"https:\\\/\\\/www.rithum.com\\\/\",\"name\":\"Rithum\",\"description\":\"Powering the future of commerce\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.rithum.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Rithum Security | Rithum","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rithum.com\/rithum-security\/","og_locale":"en_US","og_type":"article","og_title":"Rithum Security","og_url":"https:\/\/www.rithum.com\/rithum-security\/","og_site_name":"Rithum","article_publisher":"https:\/\/www.facebook.com\/rithumcommerce","twitter_card":"summary_large_image","twitter_site":"@rithumcommerce","twitter_misc":{"Written by":"vict0ri4"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.rithum.com\/rithum-security\/","url":"https:\/\/www.rithum.com\/rithum-security\/","name":"Rithum Security | Rithum","isPartOf":{"@id":"https:\/\/www.rithum.com\/#website"},"datePublished":"2025-08-08T15:44:29+00:00","breadcrumb":{"@id":"https:\/\/www.rithum.com\/rithum-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rithum.com\/rithum-security\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.rithum.com\/rithum-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.rithum.com\/"},{"@type":"ListItem","position":2,"name":"Rithum Security"}]},{"@type":"WebSite","@id":"https:\/\/www.rithum.com\/#website","url":"https:\/\/www.rithum.com\/","name":"Rithum","description":"Powering the future of commerce","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rithum.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/pages\/3566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/comments?post=3566"}],"version-history":[{"count":0,"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/pages\/3566\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/media?parent=3566"}],"wp:term":[{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.rithum.com\/wp-json\/wp\/v2\/coauthors?post=3566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}