Skip to content
ruam.ai
Try for free

Security

Last updatedOctober 28, 2026
Applies toruam.ai, the Ruam web app, the Chrome extension, and the Ruam desktop apps for macOS and Windows

Ruam AI is time tracking that people are meant to trust, so we collect little and protect what we keep. This page says how, in plain words. It sits alongside our Privacy Policy and Terms of Service, which are the full legal statements.

  • Data is encrypted in transit and at rest.
  • Each team’s data is kept separate from every other team’s.
  • Only people who need access to run and support Ruam have it.
  • Data is stored in the United States.
  • We do not sell customer data, use it for advertising, or use it to train AI models.

No system is perfectly secure. If a breach affects your data, we will tell affected customers and, where the law requires, the people affected and the authorities, without undue delay.

We use a small number of companies to run Ruam. Each only gets the data it needs for its job. The list, with what each one does and where it is based, is on our Subprocessors page.

  • We’re not SOC 2 certified yet. We plan to start a SOC 2 audit as we grow.
  • Ruam is not HIPAA compliant.
  • Ruam is built to follow GDPR. Every plan includes a Data Processing Agreement, already signed by us: download it from your workspace’s settings in Ruam. A DPA on your own terms is part of the Enterprise plan: email legal@ruam.ai.
  • When data about people in the EU, the UK or other regions is transferred to or accessed from the United States or India, we use safeguards the law recognizes, such as the European Commission’s Standard Contractual Clauses.

If you think you have found a security problem in Ruam, email support@ruam.ai with what you found and how to reproduce it. Our security.txt lists the same contact. Please give us a reasonable chance to fix the problem before you share it publicly.

Security questionnaires, custom security reviews and an uptime SLA are part of the Enterprise plan. You can see how Ruam is running at any time on our status page. See Pricing for the plans, or book a demo to talk it through with the founder.