Snapshot 223798

Document
Security page
URL
https://relishiq.com/security/
Fetched
HTTP status
200
Content type
text/html; charset=UTF-8
Fetch mode
static
Size
315113 bytes
SHA-256 (raw)
e7890460a4507a1011133719be2cefc6eadad7e2e819728fd4475757ad423874
SHA-256 (normalized text)
ac372eb5e4d98c82a6fb22f4d5071f79549a0af48216918be0555f0b2731a89c

Normalized text

Scripts and page chrome removed; this is what change detection compares.

Skip to content
Supplier Data Validation
AI-Powered Invoice Processing
Bank Account Validation
Worker Data Validation
Every Supplier Touchpoint. Accurate. Compliant. Trusted.
Get Started
Accounts Payable
Human Resources
Information Technology
Procurement
Industries
Consumer Goods
Energy & Utilities
Financial Services & Insurance
Healthcare & Life Sciences
Higher Education
Manufacturing
Public Sector
Technology
Treasury
Trusted By Brands Worldwide
Get Started
Coupa
Dun & Bradstreet
SAP
ServiceNow
Workday
Carahsoft
Download the SAP White Paper
Learn More
Free Tools & Resources
Webinars
Blog
Invoice Processing White Paper
Sanctions White Paper
Spend Matters Analysis
ROI Calculator
Supplier Onboarding eBook
Financial Services Compliance Guide
Healthcare Guide: Operational Reliability
Manufacturer's Guide: Supplier Validation & Invoice Control
Case Studies
Altru Health System
Aunt Millie’s
Best Buy
Denny’s
Exelixis
EZCORP
Freeport-McMoRan
Grand Valley State
Las Vegas Valley Water District
PayPal
QTS
University of Nebraska
Specialty Smile Partners
University of Tampa
Read our Best Buy Case Study
Learn More
About Us
Security
AI: Innovating with Integrity
Careers
Customers
Received A Call from Relish?
AI: Innovating With Integrity
Learn More
How Relish Protects Your Data
Protecting critical data with enterprise-grade security, continuous validation, and fraud reimbursement.
Enterprise Software, Reinvented for the Modern User
How We Protect Your Data
Relish utilizes enterprise-grade best practices to protect our customers’ sensitive data, and uses Drata to verify its security, availability, confidentiality, privacy and processing integrity controls. Relish works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 2 Type 2 report against stringent standards.
We work with an independent auditor to maintain a SOC 2 Type II report, which objectively certifies our controls to ensure the continuous security of our customers’ data.
Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity.
Relish is designed to help organizations meet General Data Protection Regulation (GDPR) requirements for the secure processing and protection of personal data.
Our platform incorporates privacy-by-design principles, strong access controls, encryption, and structured audit trails to help organizations manage sensitive supplier, worker, and payment data responsibly. By embedding validation and compliance controls directly into enterprise workflows, Relish helps customers maintain data accuracy, reduce risk exposure, and support regulatory accountability across global operations.
Note: GDPR compliance remains the responsibility of each organization for processing personal data. Relish provides tools, controls, and security practices designed to help customers support their GDPR compliance programs.
Relish provides automated bank account validation, fraud mitigation, and audit-ready controls designed to support organizations in meeting ACH Operating Rule requirements established by Nacha. Our platform embeds risk-based validation and monitoring controls directly within existing financial system workflows, helping customers implement documented internal controls across the payment lifecycle.
Note: Nacha establishes ACH Operating Rules for network participants. Relish is a Nacha Preferred Partner for Account Validation, Fraud Monitoring, and Risk and Fraud Prevention
Relish works with an independent auditor to maintain a HIPAA Compliance report and has achieved HIPAA Compliance report for this regulation, which objectively certifies our controls to ensure continuous privacy and security of our customers’ data.
About HIPAA
HIPAA is a federal law that requires the creation of national standards to protect sensitive patient health information from being disclosed without the patient’s consent or knowledge.
Relish is built on the belief that trusted data reduces risk. Through Data Assure, supplier identity, banking information, tax data, ownership records, and sanctions status are continuously validated throughout the supplier lifecycle and prior to payment execution.
Trust isn’t just accuracy, it’s accountability. That’s why Relish stands behind its validation process with our Fraud Protection Guarantee. By combining continuous validation, proactive monitoring, and embedded workflow controls, Relish helps customers turn risk into control, complexity into clarity, and data into confidence.
Note: Fraud Protection Guarantee coverage is subject to program eligibility requirements, validation procedures, and applicable terms. Relish provides continuous validation, monitoring, and fraud prevention controls designed to help customers reduce payment risk and support trusted business operations.
Enterprise Software, Reinvented for the Modern User
How We Protect Your Data
Relish utilizes enterprise-grade best practices to protect our customers’ sensitive data, and uses Drata to verify its security, availability, confidentiality, privacy and processing integrity controls. Relish works with independent experts to verify its security, privacy, and compliance controls, and has achieved SOC 2 Type 2 report against stringent standards.
SOC 2 Report
We work with an independent auditor to maintain a SOC 2 Type II report, which objectively certifies our controls to ensure the continuous security of our customers’ data.
Developed by the Assurance Services Executive Committee (ASEC) of the AICPA, the Trust Services Criteria is the set of control criteria to be used when evaluating the suitability of the design and operating effectiveness of controls relevant to the security, availability, or processing integrity of information and systems, or the confidentiality or privacy of the information processed by the systems at an entity, a division, or an operating unit of an entity.
Supports ACH Operating Rules
Relish provides automated bank account validation, fraud mitigation, and audit-ready controls designed to support organizations in meeting ACH Operating Rule requirements established by Nacha. Our platform embeds risk-based validation and monitoring controls directly within existing financial system workflows, helping customers implement documented internal controls across the payment lifecycle.
Note: Nacha establishes ACH Operating Rules for network participants. Relish is not affiliated with, endorsed by, or certified by Nacha.
Employee Trainings
Security is a company-wide endeavor. All employees complete an annual security training program and employ best practices when handling customer data.
Penetration Tests
Relish works with industry leading security firms to perform annual network and application layer penetration tests.
Secure Software Development
Relish utilizes a variety of manual and automatic data security and vulnerability checks throughout the software development lifecycle. Learn more about Drata.
Data Encryption
Data is encrypted both in-transit using TLS and at rest.
Fraud Protection Guarantee
Relish combines continuous supplier validation and fraud protection, helping customers turn risk into control and data into confidence.
Continuous Security Control Monitoring
Relish uses Drata’s automation platform to continuously monitor 100+ security controls across the organization. Automated alerts and evidence collection allow Relish to confidently prove its security and compliance posture any day of the year, while fostering a security-first mindset and culture of compliance across the organization.
Learn more about SOC 2 Type II Compliance and Relish Security Program here.
Vulnerability Disclosure Program
If you believe you’ve discovered a bug in Relish’s security, please get in touch at infosec@relishiq.com. Our security team promptly investigates all reported issues.
Relish is designed to help organizations meet General Data Protection Regulation (GDPR) requirements for the secure processing and protection of personal data.
Our platform incorporates privacy-by-design principles, strong access controls, encryption, and structured audit trails to help organizations manage sensitive supplier, worker, and payment data responsibly. By embedding validation and compliance controls directly into enterprise workflows, Relish helps customers maintain data accuracy, reduce risk exposure, and support regulatory accountability across global operations.
Note: GDPR compliance remains the responsibility of each organization for processing personal data. Relish provides tools, controls, and security practices designed to help customers support their GDPR compliance programs.
Get Started with Relish
Get Started