Security & Trust
Robsy coordinates robots in live facilities, so security is built in rather than added afterwards. Here is what protects your data and your fleet today.
Controls in the product today
HTTPS only
The API instructs browsers to reach it over HTTPS only (HTTP Strict Transport Security), and every link Robsy sends you points to an HTTPS address.
Role-based access control
Every user holds a role, and each role grants a defined set of permissions that the API checks before it serves a request. Each request is bound to the organisation of the user who makes it, or of the key it carries, and a key reads only the kinds of data chosen when it was made.
Multi-factor sign-in
Protect sign-in with an authenticator app (TOTP) and single-use backup codes.
Passwords stored as one-way hashes
Passwords and MFA backup codes are stored as bcrypt hashes, never in a form that can be read back.
Audit logging
Audit logs of account and fleet activity, exportable as a CSV for your own records.
Vulnerability disclosure
Found a security issue? Report it to security@robsy.ai with the steps to reproduce it.
Security questionnaires and any other security question go to the same address.
Privacy and data processing
How we handle personal data, and how we process your organisation's data on your behalf.