Built on trust.
You own your data, your processes, and your IP. Always. Published terms, transparent pricing, and clear answers to the questions procurement teams actually ask.
Proud to be 100% NZ built, Māori and Pacific owned, enterprise proven.
Common questions
Straight answers to the questions we get asked most.
Want more detail?
Documentation
Everything your procurement and legal teams need, in one place.
Our commitments
Clear terms, transparent pricing, and a clean exit if you ever need one - built into every engagement.
NZ Sovereign
Proudly 100% NZ built. Your data stays yours, never used for model training.
Enterprise Security
ISO 27001 and ISO 42001 aligned. Role-based access, encryption, audit logging, and incident response.
Your Cloud or Ours
RIVER cloud, sovereign deployments, or your Azure/AWS environment.
Transparent Pricing
Transparent pricing on every service. Clean engagements, no surprises.
How we handle AI data
A plain-language summary of how we handle data across AI engagements.
Your data stays yours
You own your data, your processes, and your IP. Always.
No training on your data
We don't use client data to train public AI models. Ever.
Choose your deployment
RIVER Cloud, Customer Cloud, or Customer-Managed. Your choice.
Enterprise access controls
RBAC, SSO, audit logging, and least-privilege access as standard.
Clean exit, always
Full data export with a structured transition plan on request.
NZ & AU compliance
Designed for NZ Privacy Act 2020 and Australian Privacy Principles.
Security & compliance
Enterprise security, AI governance, and independent verification built into every engagement.
ISO 27001
Information Security
Risk-based security management
Access control, encryption, incident response
Continuous improvement and regular audits
Aligned - certification in progress
ISO 42001
AI Governance
AI risk assessment and data quality governance
Human oversight and model lifecycle management
Responsible AI principles for every engagement
Aligned - certification in progress
SOC 2 Type II
Trust Services
Security, availability, confidentiality, privacy
Independent verification over a sustained period
Controls tested continuously, not point-in-time
Aligned - audit in progress