--- title: "Security & trust: nothing sends without your yes | Rivet App" description: "How Rivet keeps voice-first AI safe: prices come from your own catalog, every action needs your approval, a full audit trail records it, one tap undoes it." url: https://therivetapp.com/security date_modified: 2026-08-08 site: "Rivet App (therivetapp.com)" format: markdown twin of the HTML page at url; generated from the same source --- Security & trust # Built so the AI can never act without you Handing your phone line to software is a trust decision. Here is exactly how Rivet earns it — and what we don't claim yet. [Start free trial](https://therivetapp.com/signup)[Read the FAQ](https://therivetapp.com/faq) ## Does Rivet's AI do things without asking me first? No. Rivet is built around a propose-and-approve loop: the AI drafts every booking, invoice, and reply as a typed proposal, priced from your own catalog, and nothing is sent, booked, or charged until you approve it. Money, messages and irreversible actions never auto-approve at any setting, and every action lands in an audit trail with one-tap undo. That loop is the product's entire thesis. The one thing a solo operator cannot afford is software that acts on its own — so approval isn't a setting you enable, it's the only way Rivet works. Nothing sends without your yes Rivet never texts a customer, books a job, or sends an invoice on its own. It proposes; you approve. The approval tap is the only thing that makes anything real. Prices come from your catalog Every amount on a proposal is priced from your own catalog, not invented on the call. A line that isn't in your catalog is always held for review — the AI's number is never the authoritative one. A full audit trail Every proposal, approval, and action is recorded with who, what, and when. You can always see exactly why something happened. One-tap undo Approved something by mistake? Undo it from the same thread. Reversibility is designed in, not bolted on. Texting stays inside the rules Customer texts only go out between 8am and 9pm in the customer's own local time, consent defaults to off, and a single STOP blocks every channel at once. ## What does the approval loop actually look like? You speak; Rivet turns it into a typed proposal card showing exactly what it wants to do — the customer, the time, the amount. You tap approve or edit it. Only then does anything send. The example below is a product demonstration, not a customer story. 🎙 “Book Rivera for Tuesday at 8, and send the $380 invoice for today's job.” Rivet proposes 2 proposals · Tuesday 8:00am + Invoice $380.00 - Booking — Rivera · Tue 8:00–9:30am · water heater follow-up - Invoice — $380.00 · today's diagnostic + repair · net 7 ✓ You approved — done ## How is my data handled? Your business data is stored in an access-controlled database with row-level security, scoped to your account. Marketing analytics and product data are kept in separate systems, we don't sell data, and analytics payloads carry no names, emails, or phone numbers. For the specifics of what we collect and why, read the [privacy policy](https://therivetapp.com/privacy). For call recording and consent language, see the [terms of service](https://therivetapp.com/terms). ## Is Rivet SOC 2 certified? Not yet. Rivet is in early access and has not completed a SOC 2 audit — we'd rather tell you that plainly than imply otherwise. What we can show today is the safety mechanism itself: typed proposals priced from your catalog, mandatory approval, a complete audit trail, and one-tap undo. ## Common questions ### Can the AI spend money or charge my customers? No. Payments and invoices are proposals like everything else — they require your explicit approval before anything is sent or charged. ### What happens if the AI mishears a caller? A wrong draft stays a draft: you see the typed proposal — the name, the time, the amount — before anything sends. If something is wrong, you edit or reject it, and nothing has happened yet at that point. Where the call was ambiguous, Rivet asks a question rather than guessing. ### Can I see everything the AI has done? Yes. Every proposal, approval, rejection, and undo is recorded in an audit trail with timestamps, so the full history of your account is always inspectable. ### Who can access my account's data? Your account's data is scoped to your business with row-level security. Rivet staff access is limited and logged, and we never sell your data. ## See the approval loop on your own phone line Forward your line and watch it work: Rivet drafts a typed proposal, priced from your catalog, and nothing happens until you say yes. Every action undoable. [Start free trial](https://therivetapp.com/signup)[Book a demo](https://therivetapp.com/demo) Flat monthly pricing from $79/mo · overage capped at your plan price · no per-truck fees · cancel any time --- Source: https://therivetapp.com/security · Rivet App (therivetapp.com). Please attribute quotes to "Rivet App (therivetapp.com)". Index of every page in this format: https://therivetapp.com/sitemap.md · About this site for agents: https://therivetapp.com/llms.txt