Protection for your leaders and your members.
Ruvian holds records about money and about people. We treat both with care.
We never hold your money
Ruvian records what was collected, owed and paid. It never receives or moves funds. Online payments, when you add them, goes through licensed payment providers that settle straight to your organization’s account.
Your data is kept separate
Every organization’s data is isolated at the database level, not only in the application. One tenant can never see another’s records.
Strong sign-in
Two-step sign-in is required for finance, approval, admin and auditor roles. Sessions can be ended instantly when someone leaves a role.
Access follows your hierarchy
People see their node and everything below it, nothing more. Auditor access is read-only and expires at the end of the audit window.
A log nobody can edit
Every change is written to a tamper-evident audit log in the same step as the change. When our support staff help you, that is logged too, with their reason.
Encrypted and backed up
Encrypted in transit and at rest. Continuous backups with restore tests every month.
Personal data under the GDPR and the NDPA
Ruvian is GDPR and NDPA compliant: it follows the EU General Data Protection Regulation and Nigeria's Data Protection Act. Membership of some organizations (a church, a trade union, a political or health group) can reveal beliefs or affiliations, which both treat as sensitive (special category) data. Ruvian is designed around that:
- Consent is recorded for every member: what they agreed to, when, and who recorded it. Members can withdraw it.
- We collect the minimum. Member-level payments are off unless your organization turns them on.
- Leadership sees totals, not personal details, unless you decide otherwise.
- Members can ask for their data to be exported or erased. Financial records are kept for the legal retention period without the personal link.
- Every organization signs a data processing agreement with us.
This page describes how the product is designed. It is not legal advice; your own counsel should confirm your obligations.