Security

Last updated:

This page lists what Remy does today to keep your data safe. We only list what is already in place.

Where your data lives

  • Remy stores your data in Amazon Web Services' Canada (Central) region, in Montreal.
  • The database and file storage are encrypted at rest.
  • Every connection is encrypted in transit with TLS. The database refuses any connection that isn't.

What Remy reads, and what it leaves out

  • Read-only. Remy reads your systems. It does not change them.
  • No guest details. Guest names, emails, phone numbers, addresses and notes are removed as each booking arrives, before anything is stored. Every booking connection must list the guest fields it drops, or Remy won't load it.
  • Payroll kept to a minimum. From payroll, Remy reads only each employee's number, name, preferred name, venue, department and hourly rate. We ask you not to send social insurance numbers, bank or card numbers, home addresses or health information.

Who can see what

  • Roles. Each person is an admin or a member. Only admins sync data.
  • Venues. Each member sees only the venues they are given, on every figure.
  • Labour and wages. A new member can't see labour and wages until an admin turns them on.
  • Sign-in. People sign in with a password, Google or Microsoft. A Google or Microsoft account reaches an existing account only by an email address that provider has verified. "Sign out on every device" ends all of a person's sessions.
  • Connection keys. The keys Remy uses to reach your systems are sealed with a key unique to your company, protected by AWS's key management service.
  • Our team. Only Crema Labs staff who need access to run Remy have it, and they are bound by confidentiality.

How Remy uses AI

  • Code does the maths. The AI model chooses which request answers a question. Our code computes every figure. The model does not write numbers.
  • Zero data retention. Requests to the AI model go through OpenRouter, set so that only model hosts that keep nothing and don't train on what they receive can take them. We have not yet confirmed every host's location.

Error reports

We use Sentry to learn when something breaks. Error reports say what failed and where. They do not include personal details, cookies, request contents, or questions and answers. The secret codes in our email links are removed from them too.

Backups and deletion

  • Database backups are kept for 14 days.
  • When an agreement ends, we delete the customer's data within 30 days. Deleted files can be recovered for 30 days, then they are gone.

If something goes wrong

If someone gets unauthorised access to a customer's personal information, we tell that customer without undue delay, and within 72 hours of finding out. We give them what they need to meet their own duties.

Report a security problem

If you think you've found a security problem in Remy or this website, please email team@cremalabs.xyz. Tell us what you found, how to reproduce it, and how to reach you.

While you look into it, please:

  • don't access, change or delete other people's data;
  • don't disrupt Remy or this website;
  • give us a fair chance to fix the problem before you share it.

We will reply, and keep you updated while we fix it.