Security at REEZN

Last updated June 30, 2026

REEZN helps software teams run features through a structured, AI-assisted review workflow. That means we hold your product ideas, feature specs, and review history, and we treat them carefully. This page explains how the service is built and the practical steps taken to keep your data safe.

Infrastructure

REEZN runs entirely on Google Firebase. Authentication, the Firestore database, and the server-side Cloud Functions are all hosted on Google Cloud Platform, which maintains its own independent security certifications (including SOC 1/2/3 and ISO 27001) for the underlying infrastructure. We do not run our own servers.

Encryption

• All traffic between your browser and REEZN is served over HTTPS (TLS).
• Data stored in Firestore is encrypted at rest by Google Cloud.

Authentication & access control

Accounts are managed through Firebase Authentication. Within an organization, every action is gated by a role (admin, reviewer, author, or observer) and by team-based project access. These permissions are enforced server-side by Firestore security rules, not just hidden in the interface, so a user can only read or change the data their role and team membership allow.

AI processing

REEZN's analysis and canvas features send the relevant feature content to a third-party AI provider (Anthropic, OpenAI, or Google) using an API key that your organization configures. That content leaves our infrastructure only to reach the provider you chose, and is handled under that provider's terms. We do not use your data to train any model.

Payments

Billing is handled by Stripe. Your full card details are entered directly with Stripe and are never stored on REEZN's servers.

Honest limitations

REEZN is built and maintained by a solo computer engineer. We rely heavily on the security of our underlying providers (Google Cloud, Stripe, and your chosen AI provider) and follow sensible practices on top of them. We do not currently hold our own formal security certification or run a paid bug-bounty program. If you find a vulnerability, please report it responsibly to the contact below before disclosing it publicly, and we'll respond as quickly as we can.