Pricing
Docs

Security your team can verify, not just read about.

grovs runs inside your infrastructure. This page covers what that means for your data, your review and your continuity.

The security pack
Architecture, data flows, SIG Lite and CAIQ answers
Agreements
BAA and DPA on request
Turnaround
2 business days, under NDA if needed

Request the security pack

  • None

    grovs staff access to your data

  • None

    sub-processors when self-hosted

  • MIT

    open-source core you can read

  • Hash-chained

    audit log, exportable to your SIEM

Where your data goes.

Your apps talk to grovs on your servers, and grovs writes to your databases. The only calls out of your network are the ones you configure.

  1. 1Apps, emails and QR codes call grovs on your own domain.
  2. 2grovs writes every event to your Postgres and ClickHouse.
  3. 3Outbound calls go only to the services you configure.

Data & deployment

Self-hosted grovs is software you run. Your users' data is written to databases in your account, not ours.

Where user data is stored
Your infrastructure onlyPostgres, ClickHouse and Redis that you run, in the region you choose.
grovs staff access to your data
NoneYour databases and your users' data are never reachable by our team.
Sub-processors (self-hosted)
NoneNo third party receives your users' data through grovs.
Outbound calls
Only the ones you configureAPNs and FCM for push, App Store and Google Play for receipt checks, your registry for images.
Updates
Images you pullNothing is pushed into your deployment. You upgrade when you're ready.
Deploy targets
AWS · Azure · Google Cloud · on-premWith Terraform, Helm, Docker Compose or Ansible.
AI and LLM calls
Nonegrovs doesn't send your data to any AI model.

Access & identity

Your team signs in with the identity provider you already use, and leaves when you remove them there.

Single sign-on
OIDCOkta, Entra ID, Ping, Google, or any OIDC provider.
User provisioning
SCIMAccounts created and removed from your identity provider.
Enforced SSO per verified domain
YesAnyone with your company email has to sign in through SSO.
Roles
Admin and memberAdmins manage settings and people. Members work in the product.

Audit & logging

Every action in the dashboard is recorded in a log that can't be quietly changed.

Audit log
Tamper-evidentEach entry is hash-chained to the one before, so edits and gaps show.
Coverage
About 60 action typesActions across the dashboard are recorded with who did them and when.
SIEM export
Via API tokenPull the log into the SIEM your security team already watches.

Open source

Read the code before you run it. That's the whole point.

The core (SDKs, backend, dashboard) is MIT-licensed on GitHub. Your security team can review the code that runs in your environment. Enterprise features ship in a separate licensed image.

Read the code on GitHubSDKs, backend and dashboard · MIT licence

Vendor continuity

What happens to your deployment if we're gone.

If grovs stopped operating tomorrow, your deployment keeps running.

  1. 1

    It keeps running

    Your deployment runs on your servers, with your data stores. Nothing depends on us being there.

  2. 2

    You have the code

    The core is MIT-licensed on GitHub. Enterprise source escrow is available on request.

  3. 3

    You're not on your own

    Versioned releases with upgrade notes, security patches under the support SLA, and a named engineer for every Enterprise customer.

Compliance

Where we stand on each framework, stated plainly.

HIPAA

Architecture supports HIPAA

BAA available

GDPR

Data stays where you deploy

DPA available

SOC 2 · ISO 27001

Dates on request

On the roadmap

Vulnerability disclosure

Found something? Here's how to tell us.

Report an issue[email protected]
Acknowledged within2 business days

We coordinate disclosure with you.

Your first link, live this afternoon.

Install the SDK, connect your domain and send a link that opens the right screen. Start free on grovs Cloud, or run the same stack in your own.

Compare plans
grovs Cloud

$0up to 10K monthly users

  • Sign up and add the SDK
  • Your first link live the same day
  • Flat yearly price as you grow
Start for free
Self-hosted

Flat licencea year, in your cloud, no metering

  • AWS, Azure, GCP or your data center
  • Deployment help from our engineers
  • Your SSO, your database, your rules
Talk to sales