Security, stated plainly.
What we do to protect your data, your domains, and the people Rampline contacts.
Last updated September 2026
Encrypted, isolated
Every workspace is its own tenant. Data is encrypted at rest and in transit.
Least access
SSO for you. Hardware-key gated, logged, on-call-only production access for us.
No unearned badges
Audit reports go here when they exist. Until then, ask and we will show you our controls.
On this page.
Running a security review? Send the questionnaire to security@rampline.ai.
Your data
Account lists, messages, reply history and calendar data are encrypted at rest and in transit. Each workspace is isolated at the database level. No query can cross a workspace boundary.
You own your data. Export it or delete your workspace from the product at any time, and it is purged from primary storage within 30 days.
Access and authentication
Sign-in supports SSO through Google and Microsoft. Sessions are short-lived and revocable from the account settings page.
Access to production by Rampline staff is limited to a named on-call group, gated by hardware keys, and logged. Support staff do not have standing access to customer data.
Sending infrastructure
Outreach never sends from your primary domain. Rampline provisions separate sending domains, authenticates them with SPF, DKIM and DMARC, and warms them before volume.
Suppression lists are enforced at send time across the whole workspace, and opt-outs cannot be cleared by re-importing a list.
AI and model providers
Model calls are made through providers under contracts that prohibit training on your data. Prompts and completions are not retained by the provider beyond the request.
Rampline acts only within the limits you set: approved senders, approved sequences, per-inbox caps, and a suppression list it cannot override.
Audits and reports
Rampline is not yet SOC 2 or ISO 27001 certified. We will publish the report here when the audit is complete, and will not display a badge before then.
Security questionnaires, penetration test summaries and our data-processing agreement are available on request at security@rampline.ai.
Reporting a vulnerability
If you believe you have found a security issue, email security@rampline.ai with enough detail to reproduce it. We acknowledge reports within two business days and will not pursue action against good-faith research.
