How Relish Protects Your Data
Protecting critical data with enterprise-grade security, continuous validation, and fraud reimbursement.
Enterprise Software, Reinvented for the Modern User
How We Protect Your Data
Relish utilizes enterprise-grade best practices to protect our customers’ sensitive data, and uses Drata to verify its security, availability, confidentiality, privacy and processing integrity controls. Relish works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 2 Type 2 report against stringent standards.
We work with an independent auditor to maintain a SOC 2 Type II report, which objectively certifies our controls to ensure the continuous security of our customers’ data.
Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity.
Relish is designed to help organizations meet General Data Protection Regulation (GDPR) requirements for the secure processing and protection of personal data.
Our platform incorporates privacy-by-design principles, strong access controls, encryption, and structured audit trails to help organizations manage sensitive supplier, worker, and payment data responsibly. By embedding validation and compliance controls directly into enterprise workflows, Relish helps customers maintain data accuracy, reduce risk exposure, and support regulatory accountability across global operations.
Note: GDPR compliance remains the responsibility of each organization for processing personal data. Relish provides tools, controls, and security practices designed to help customers support their GDPR compliance programs.
Relish provides automated bank account validation, fraud mitigation, and audit-ready controls designed to support organizations in meeting ACH Operating Rule requirements established by Nacha. Our platform embeds risk-based validation and monitoring controls directly within existing financial system workflows, helping customers implement documented internal controls across the payment lifecycle.
Note: Nacha establishes ACH Operating Rules for network participants. Relish is a Nacha Preferred Partner for Account Validation, Fraud Monitoring, and Risk and Fraud Prevention
Relish works with an independent auditor to maintain a HIPAA Compliance report and has achieved HIPAA Compliance report for this regulation, which objectively certifies our controls to ensure continuous privacy and security of our customers’ data.
About HIPAA
HIPAA is a federal law that requires the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge.
Relish is built on the belief that trusted data reduces risk. Through Data Assure, supplier identity, banking information, tax data, ownership records, and sanctions status are continuously validated throughout the supplier lifecycle and prior to payment execution.
Trust isn’t just accuracy, it’s accountability. That’s why Relish stands behind its validation process with our Fraud Protection Guarantee. By combining continuous validation, proactive monitoring, and embedded workflow controls, Relish helps customers turn risk into control, complexity into clarity, and data into confidence.
Note: Fraud Protection Guarantee coverage is subject to program eligibility requirements, validation procedures, and applicable terms. Relish provides continuous validation, monitoring, and fraud prevention controls designed to help customers reduce payment risk and support trusted business operations.
Employee Trainings
Security is a company-wide endeavor. All employees complete an annual security training program and employ best practices when handling customer data.
Penetration Tests
Relish works with industry leading security firms to perform annual network and application layer penetration tests.
Secure Software Development
Relish utilizes a variety of manual and automatic data security and vulnerability checks throughout the software development lifecycle. Learn more about Drata.
Data Encryption
Data is encrypted both in-transit using TLS and at rest.
Fraud Protection Guarantee
Relish combines continuous supplier validation and fraud protection, helping customers turn risk into control and data into confidence.
Continuous Security Control Monitoring
Relish uses Drata’s automation platform to continuously monitor 100+ security controls across the organization. Automated alerts and evidence collection allow Relish to confidently prove its security and compliance posture any day of the year, while fostering a security-first mindset and culture of compliance across the organization.
Learn more about SOC 2 Type II Compliance and Relish Security Program here.
Vulnerability Disclosure Program
If you believe you’ve discovered a bug in Relish’s security, please get in touch at infosec@relishiq.com. Our security team promptly investigates all reported issues.
