Shared Responsibility Model
At Researck, we follow a shared responsibility model for data security and compliance. This means Researck and our customers each play a role in protecting data stored and processed on our platform.
1. What Researck Is Responsible For
Researck is responsible for securing the platform infrastructure, applications, databases, encryption systems, and global data centers used to host your data.
- Server & infrastructure security
- Encryption at rest & in transit
- Vulnerability management & patching
- Zero-trust access policies
- Disaster recovery & backups
- Compliance certifications (ISO, SOC 2, GDPR, etc.)
2. What Customers Are Responsible For
Customers are responsible for how they use the platform — including access control, data uploads, user permissions, and any connected third-party services.
- Managing user access & account security
- Using strong passwords & MFA
- Configuring roles, sharing & permissions appropriately
- Complying with internal data policies
- Validating third-party integrations
- Ensuring data legality & ownership of uploaded files
3. Shared Responsibilities (Both Sides)
Certain responsibilities are shared — meaning both Researck and the customer take action to maintain security.
- Data privacy compliance (GDPR, CCPA, etc.)
- Incident reporting & response
- Monitoring account activity & anomalies
- Protecting sensitive or regulated data
Need More Information?
Read our Document Security FAQ or contact our Compliance Team at [email protected].