Trust center
Built on infrastructure
with standards behind it.
ryfie pairs a carefully managed website service with Oracle Cloud Infrastructure. This page separates infrastructure assurances from the responsibilities involved in operating each website.
The operating model
One service.
Clear layers of responsibility.
Oracle is responsible for security of its underlying cloud infrastructure and operations. ryfie is responsible for the application, website configuration, service processes, and the way customer information is handled within the service.
This shared-responsibility model is the professional way to describe cloud assurance: strong provider controls underneath, deliberate application controls above them.
Infrastructure attestations
Independent programs
published by Oracle.
Oracle publishes compliance attestations and certificates for eligible OCI services and regions. Examples within Oracle’s broader cloud compliance program include:
- SOC 1, SOC 2, and SOC 3
- ISO 27001, ISO 27017, and ISO 27018
- PCI DSS and other industry programs
- Regional and public-sector programs where applicable
Coverage varies by cloud service, region, and workload. These programs address Oracle’s in-scope infrastructure controls; ryfie’s application and operational controls remain part of the shared-responsibility model.
Oracle Trust Center ↗OCI shared security model ↗Security practices
↗02Privacy policy
↗03Accessibility
↗04Machine information
↗Professional trust is specific, not decorative.