Information reviewed 2026-10-16

Security you can understand.

Company context should reach the right people and AI clients. Here is how Riktra limits access, what the operator can do and where the limits are.

Who can access company data?

Access requires a signed-in account and membership of the selected company. Roles control what a person can read, propose and approve. Company data is separated in the database, and connected AI clients use the same account permissions.

Belonging to several companies does not make their records interchangeable. An AI client cannot choose another company simply by supplying its identifier.

Can a manager read my private notes?

Private work notes and focus items are available only to their owner through Riktra. Company owners and administrators have no application permission to read a colleague’s private material. Company exports exclude it.

The operator and infrastructure providers retain privileged access needed to run and recover the service. Riktra does not offer end-to-end encryption that excludes its operator.

Can AI change what our company has decided?

AI-generated changes to shared company context become proposals. A person with approval authority must accept a proposal before it becomes shared truth. Changes retain version history.

An AI can still misunderstand information or propose something wrong. Review the content and its source before approval. Your organisation remains responsible for its decisions.

What happens when we connect an AI client?

An authorised client can retrieve the context its signed-in user is allowed to see, including that person’s own private context where the requested operation permits it. Review the client and provider before connecting.

Revoking a connection stops further authorised retrieval. It does not erase answers, chat history or other copies already held by the client or its provider.

How is the service protected in practice?

Connections use HTTPS. Privileged credentials stay on the server. Access controls, database isolation and important user flows are checked as part of changes to the service. Operational alerts use limited technical metadata rather than the contents of company records.

Optional usage analytics is off by default and can be enabled by the company. It uses fixed, content-free fields. Session replay is unavailable; the service is not designed to rank individual workers.

What do backups mean for us?

Database backups and a database restoration exercise support recovery. A database backup does not recreate every application, sign-in, email or domain setting. A database restoration exercise is not proof of a complete service recovery.

There is no guaranteed recovery time or zero-data-loss promise in the beta. Keep independent copies of important information. Deleted data and revoked access must be reconciled before a recovered service reopens.

Is Riktra certified or independently audited?

Riktra is not ISO 27001 certified and has not had an independent security assessment. Infrastructure suppliers may hold their own certifications; those do not certify Riktra.

If your organisation needs certification, an external review or specific availability guarantees, discuss that requirement before using the service. A working feature or successful automated check does not replace that assessment.

How do we report a security concern?

Send a short description, affected feature, approximate time and safe reproduction steps to the privacy and security contact below. Start without passwords, access tokens, transcripts or other people’s personal information; arrange a suitable channel if evidence is needed.

For a personal-data breach affecting customer data, Riktra must notify the customer without undue delay after becoming aware. The customer decides its own regulatory notifications. Support is handled by one founder, without continuous coverage or a guaranteed response time.

Talk to the person running Riktra

Riktra is operated by House of Brattberg AB, registration number 559125-1805, Banérgatan 3, 521 31 Falköping, Sweden.

Service and pilot questions: hello@riktra.com
Privacy requests and security reports: privacy@riktra.com