Trust & Security

RevokeTrail is designed around a simple principle: reduce exposure by keeping the most sensitive access details out of the system and keeping operational responsibility traceable.

RevokeTrail does not store actual door codes, PINs, alarm codes, lockbox codes, gate codes, or digital credential secrets. Code-type assets are tracked as references only.

Labels and QR codes are intended for internal asset identification. Labels must not expose customer name, customer address, site address, driver/worker name, partner name, or access code. QR/barcode values identify the asset internally only.

RevokeTrail is built as a multi-tenant SaaS product. Tenant data is scoped so each company works with its own operational records.

Access to operational areas is controlled by roles. Assignment, transfer, return, incident, label print, report export, and role-change activity are intended to be captured in audit history where supported by the product.

B2C/residential customers receive stricter privacy handling in the product design. Residential/customer-identifying information should not appear on labels. B2C address visibility/export behavior is restricted according to product rules.

RevokeTrail supports operational data export and customer anonymization/deletion workflows as product capabilities.

See the current draft inventory of service providers and categories on the subprocessors page.

For security or privacy concerns, reach the RevokeTrail support team: