Security & trust

How Reskyr looks after your department's records.

Fire records are legal records, personnel records and sometimes the only account of what happened. Here is how Reskyr keeps them safe, what we have put in writing, and why they stay yours wherever your department goes.

Can I trust you?

A founder-owned company that puts its promises in writing.

Reskyr is built and run by Veskyra, a small founder-owned company in Raleigh, North Carolina. A founder reads every message and replies within one business day. Everything below is written into the Terms and the privacy policy every department signs up under, so it holds whether or not anyone remembers this page.

You stay because it works

Monthly or annual, your choice. Plan changes take a click, the same way you subscribed, and your access runs to the end of what you paid for. We earn every renewal.

A published price that holds

One flat rate, published where anyone can read it, fixed for your whole term. Unlimited users and unlimited incidents, so a busy year costs exactly the same as a quiet one.

Everything included, and it stays that way

Every module is included at every tier, and what you signed up for stays yours for the whole term. When we add something, every department gets it.

Everything in the open

Pricing is published, the Terms are written in plain English, service status is public, and a founder reads every message and replies within one business day.

Live service status for the web and database layers is published at veskyra.com/status.

Do you know what you're doing?

Built to standards you can look up.

Reskyr is built to written standards. These are the ones that matter to a fire department and to the people who review its software.

For the fire service

  • NERIS V1 Compatible. Reskyr passed NERIS's technical compatibility review. How NERIS reporting works.
  • NFPA 1962, 1932, 1911 and 1989. The hose, ground ladder, pump test and compressor air-quality rules the equipment module enforces.
  • NFPA 1582 and NFPA 291. Medical evaluations and fit tests on the member record; hydrant flow color-coding on the map.
  • FLSA 207(k) and OSHA 300. The time clock's overtime rule and the injury logs, built in rather than exported to a spreadsheet.

For your IT department and board

  • OWASP ASVS Level 2. The application security baseline Reskyr is built and reviewed against.
  • NIST SP 800-63B. The sign-in standard behind passkeys, two-step verification and password rules.
  • SOC 2 Trust Services Criteria. Our security controls are mapped to the criteria. We will pursue an independent audit as the company grows, and we will say so here when it is complete.
  • Scoped to fire and rescue records. Non-transporting departments keep a basic EMS-assist patient contact in Reskyr. Full transporting ePCR, with its HIPAA business associate agreement, is a separate class of system by design, so your fire records are kept apart from protected health information.

The NERIS V1 Compatible badge confirms technical compatibility with the NERIS API. It is not an endorsement by NERIS.

Do you have the infrastructure to support me?

Secured by Cloudflare and stored in AWS, with nothing for the station to maintain.

These are the providers large enterprises rely on, and they are run for you. There is no server at the station and no update for anyone to remember.

Secured by Cloudflare

Every request to Reskyr passes through Cloudflare's network, which screens out attacks before they ever reach Reskyr.

Stored in AWS

Your department's records are stored in AWS data centers in the United States, encrypted and backed up automatically.

Capacity that scales on its own

Reskyr adds capacity with demand on its own, so it is just as quick on the busiest night of the year.

Status you can check

Live status for the web and database layers is published at veskyra.com/status.

Works out of signal range

Offline incident drafts on the phone sync on their own when you're back in range, and the apparatus screen keeps the call details it already has.

Always in view

Whatever happens with billing, every record stays viewable and exportable, and answering a call, availability and push alerts keep working. We call it read-only, never dark.

Is my data safe?

Your records are walled off, encrypted and permanently logged.

These are built into Reskyr and always on.

Your department's records, and only yours

Every record is walled off to your department at the deepest level of the system, not just on the screen. No other department can see it.

Encrypted everywhere

Every connection to Reskyr is encrypted, and every record is encrypted where it is stored.

Modern sign-in

Passkeys and two-step verification for everyone. Single sign-on with Microsoft Entra, Google or Okta, and directory sync, on Regional plans and up.

A permanent record of who changed what

Every change to a sensitive record is logged, and that log stays complete and permanent, so an auditor or an attorney always gets the whole story.

Access follows the roster

Remove or demote a member and their access updates immediately.

AI with hard lines

Off until your department asks for it. Your records are kept out of AI training. Incident data counts the crew instead of naming them, and patient contacts are never read.

How Reskyr AI protects your data, in full.

Is my data mine to keep?

Yes, in a format you can use, whenever you want it.

Your records are yours. Getting a copy is a setting, and so is any change to your plan.

Export at any time

Ask for a full export at any time and you receive your records and attachments with the identifiers and relationships needed to read them, ready to use anywhere.

Everyday exports are built in: incidents to CSV, OSHA 300 and 300A logs, QuickBooks CSV, branded PDFs for ISO readiness, VFIS, AFG, chief's reports, personnel files and LOSAP, and an iCal feed of the schedule.

Your NERIS records stay yours

Your incidents live in NERIS under your department's own account, independent of Reskyr. That is how we import a department's history in one click, and it stays true wherever your records go next.

If you ever move on, with dates

Access continues to the end of the paid term. For 90 days after that you can request a raw export or reactivate, with a reminder before the deadline. After that, your records are cleared from active systems within 30 days and from backups within 90 days, so nothing of yours lingers on our systems.

One click, confirmed

Any change to your plan happens the same way you subscribed, with a confirmation. Your records stay in view throughout, so a move happens on your schedule.

For your IT department

Secured by Cloudflare. Stored in AWS data centers in the United States. Sign-in supports passkeys, two-step verification and SAML or OIDC single sign-on. Application security baseline: OWASP ASVS Level 2. Authentication: NIST SP 800-63B. Controls mapped to the SOC 2 Trust Services Criteria. Affected organizations are notified of a security incident without undue delay, and renewal price changes carry thirty days' written notice, both as set out in the Terms and the Data Processing Addendum. A fuller architecture summary and the Data Processing Addendum are available on request through the contact form.

Ask the people who built it.

A founder reads every message and replies within one business day. If your IT department or board has a questionnaire, send it over.