Every program you run collects sensitive personal information — from individuals who are trusting your organization to handle it responsibly. Reviewr is built from the ground up to protect that trust.
Reviewr has been independently audited and certified to SOC 2 Type II standards — the most rigorous independent security certification for SaaS platforms. This isn't a self-assessment. It's a third-party audit of our security controls, processes, and practices conducted over an extended period.
→ Independently verified security, not self-reported
All data transmitted to and from Reviewr is encrypted using TLS. All data stored in Reviewr is encrypted at rest. Sensitive applicant information — personal details, financial documents, uploaded files — is protected at every point in its lifecycle
→ Enterprise encryption standards applied to every piece of data
Administrators control exactly what each user — staff, reviewers, committee members — can see and do within Reviewr. Reviewers see only the submissions they're assigned. Sensitive fields can be hidden or redacted based on role. Access is granted by need, not by default.
→ The right people see the right data — nothing more
Identifying information can be stripped from submissions before reviewers see them — names, institutions, demographic details, anything that could introduce bias or expose unnecessary personal data to the review panel.
→ Privacy and fairness built into the same feature
Every access, every action, every change within Reviewr is logged. Administrators can see who viewed what, when, and what was done with it. If a question arises — from an applicant, a regulator, or internal compliance — the record exists.
→ Full accountability for every interaction with applicant data
Reviewr is hosted on secure, US-based cloud infrastructure. Data residency is transparent and documented — your organization knows exactly where data lives and can represent that to applicants, funders, and compliance requirements accordingly.
→ Known, documented data residency
Reviewr is built for availability — with monitored uptime, redundancy, and disaster recovery protocols ensuring your programs and their data are accessible when you need them.
→ Programs run on infrastructure built to stay up
Reviewr's data architecture is built around the principle that organizations should collect what they need, protect it completely, and control who accesses it. Privacy isn't a feature added on. It's built into how the platform works.
→ Privacy by design, not by configuration
Independently audited and certified. Security, availability, and data integrity verified by a third party — not claimed by us.
TLS encryption in transit. AES-256 encryption at rest. The same standards used by enterprise financial and healthcare platforms.
All data hosted on US-based cloud infrastructure with documented data residency and transparent storage practices.
The all-in-one platform for managing scholarships, grants and awards programs.
