Minimum necessary data
A pilot begins with only the fields needed to validate, segment, contact, qualify, and attribute the agreed opportunity set. The public application does not request customer records or CRM credentials.
Security and control
Revenue recovery should not require uncontrolled automation.
ReviveGrid is built around data minimization, explicit approval, protected administrator access, suppression handling, attributable delivery records, and a clear boundary between AI assistance and human authority.
Administrator security
The private operator area uses a memory-hard password verifier, database-backed sessions with an inactivity timeout, two-factor authentication, short-lived login challenges, rate limiting, host-bound secure cookies, encrypted TOTP secrets, recovery codes, and security audit records.
Human approval
No external recovery campaign is released until an authorized operator reviews the opportunity, audience, exclusions, message sequence, sender identity, timing, and delivery mode.
Suppression first
Known opt-outs, do-not-contact records, unsuitable opportunities, active-campaign conflicts, missing emails, and future follow-ups after a reply are blocked through durable operational controls.
Immutable delivery records
Approved audiences, rendered messages, reply routing, sender details, provider idempotency keys, and delivery events are preserved as snapshots so later activity can be attributed and reviewed.
No autonomous commitments
AI assistance does not have authority to negotiate price, promise discounts, make technical construction claims, or commit a contractor to a project scope.
Responsible outreach boundary
Commercial recovery email requires authorized source data, accurate sender information, non-deceptive content, a valid postal address, a working opt-out mechanism, durable suppression, and human release controls. The initial managed pilot does not include AI voice calling, uncontrolled mass SMS, automatic discounts, or autonomous sales negotiation.
Report a security concern
Contact [email protected]. Do not include passwords, API keys, customer exports, or sensitive records in the first message. Security controls reduce risk but cannot provide an absolute guarantee against every threat.