RiVault
If your business passwords live scattered across browser autofills, old Slack threads, and that one person's notebook, RiVault gives them a proper home — encrypted, sensibly organised into passwords, wallet items, and secrets, and shared with exactly the right people so nothing vital disappears when someone leaves.
Stop losing track of passwords. Start using RiVault.
There's a particular kind of chaos every business runs into eventually. Someone needs the login for a shared tool. Nobody quite remembers where it's written down. Three people scroll back through old messages before someone finds it — and it turns out to be the wrong version anyway, because it changed last month and only one person updated their own note.
We built RiVault because that isn't a one-off inconvenience, it's what happens when passwords, bank details, and sensitive credentials are left to live wherever they happen to land — a browser, a spreadsheet, a message thread nobody thought to delete. RiVault gives all of that one proper home instead: encrypted, organised, and shared with exactly the right people rather than everyone or no one.
Built around how things actually get lost
Most password tools only think about logins. Businesses lose track of far more than that — bank account numbers, sort codes, WiFi passwords, licence keys, recovery codes. The things too sensitive for a notes app and too awkward to fit a standard login field.
So we split RiVault into three straightforward areas. Passwords cover anything with a username — websites, apps, subscriptions, the accounts everyone assumes they'll remember and never do. Wallet holds financial details: bank accounts, cards, sort codes, PINs, the information that's always needed and never easy to find. Secrets cover everything else sensitive that doesn't fit either category — API keys, recovery codes, serial numbers, software licences.
We kept the logic simple enough that nobody needs a manual to work out where something belongs. Has it got a username? Passwords. Is it financial? Wallet. Everything else sensitive goes into Secrets.
Personal stays personal. Team stays under control.
This is the part that changes how a team actually operates. Personal entries belong to one person and nobody else — not a colleague, not an administrator, not us. Team entries, by contrast, are shared deliberately, with control over exactly who can view or edit each one.
That solves the real problem most businesses have, which isn't "we don't have a password manager" — it's "the person who set this account up left, and now nobody can get in." Shared credentials in RiVault stay with the business rather than with whoever happened to create them. When someone joins the team or moves on, access is simply adjusted. Nothing needs resetting from scratch, and nothing disappears with the person who leaves.
The security is functional, not decorative
Everything in RiVault is encrypted with AES-256 — the standard used to protect genuinely sensitive data, not a figure we picked because it looks impressive on a page. On top of that, the vault has its own separate lock: a second authentication step distinct from the regular sign-in. Even with the right password, getting in still requires the authenticator app. That closes off a good number of the ways accounts typically get compromised.
We also host RiVault ourselves, from the Lake District. Your data doesn't sit on some anonymous third-party cloud platform — it's kept on our own infrastructure, and you can reach us directly rather than working through a support queue several tiers removed from the people who built the thing. If you care where your data actually lives, that's a genuine difference, not a footnote.
The details that end up mattering most
A built-in password generator means nobody's relying on a slight variation of the same password they've used for years. Review reminders flag credentials that have gone stale, before they quietly turn into a risk. A full audit log records every view, copy, and change, so if something ever needs explaining, there's a record rather than a guess. Team entries keep a complete change history too, which matters the moment a shared login stops working and someone needs to know exactly when and how it changed.
None of that is glamorous. All of it is exactly what's needed when something goes wrong and answers are needed quickly.
Exporting a copy of your vault is straightforward too — useful when moving providers, sharing specific details with an accountant, or keeping a personal backup. Exported files come out unencrypted, deliberately, so you can open and use them. That also means they should be handled with the same care as any sensitive document: not left on a shared drive, not emailed without protection, deleted once they've served their purpose.
Who it's for
Sole traders and freelancers get a proper place for logins, accounts, and sensitive details, instead of relying on a browser to remember everything. Small teams stop losing time to "does anyone have the login for…?" conversations that happen more often than anyone would like to admit. Business owners get the reassurance that credentials created by staff belong to the business, not to whichever employee happened to set the account up.
If you're already working with us, or exploring the wider RiCollection, RiVault follows the same approach as everything else we build: practical rather than flashy, designed to actually get used rather than demonstrated once and forgotten.
You can carry on the way most businesses do — passwords scattered across browsers and inboxes, shared accounts held together by memory and good luck. That works, mostly, until it doesn't: a login stops working, someone leaves and takes the only copy of a password with them, a sensitive detail ends up somewhere it never should have been typed.
Or you move all of it into one place actually built for the job — private where it should be private, shared where it should be shared, properly encrypted, and backed by a team you can reach directly.
We built RiVault to make that second option the obvious one. Once your passwords, accounts, and secrets are somewhere sensible, going back to the old way of doing things stops making sense.
There's a whole collection of these
RiVault is one part of something bigger: the RiCollection. What if the software your business needs already exists — and can still be made entirely your own? That's the idea behind the Ri Collection: fully working applications, each one customisable to your business.
Of course, it's always good to get a feel for what a software company makes, so take a look at just a few of our RiCollection apps. Here is just a taster of what we create.
RiOrganise — Everything your team needs in one room. Task boards, Kanban, Gantt charts, team messaging, a shared calendar, time tracking, invoicing, and an encrypted vault for your passwords and sensitive data. Put your private work and team projects in one spot so you can stop jumping between five different apps all day.
Take A Look At RiOrganise (Demo Available)
RiCreate — Content for your website and your social media, generated from what's actually on your Richah website. It reads your existing content, understands your business, and produces copy that sounds like you. No generic prompts, no starting from a blank page — just content that fits.
Visit RiCreate (Demo Available)
RiWord — Hands-free computing, properly done. RiWord listens to your voice and turns it into action: reading your taskbar, opening your apps, pasting text where you need it, searching the web, and transcribing speech so you never have to stop what you're doing just to type something.
RiNet — A fully working intranet, ready the day it's deployed. Whether it goes on premise or in the cloud, RiNet arrives with login, user management, role-based access control, and a responsive UI with a dynamic menu system already wired up. Multi-tenant ready from day one, and no blank canvas to figure out — just a solid foundation your team can actually use from the start.
And that's just a small part of what is in the RiCollection Portfolio. And if we haven't built it yet? Well, if you've spent the last ten minutes reading this and thinking "yes, but what about..." — that's exactly the conversation we want to have. Get in touch, tell us what your business looks like and what it needs, and let's build the solution.
Where is RiVault's data actually stored?
RiVault is hosted on their own infrastructure in the Lake District, not on a third-party cloud platform. Your data stays on their servers and you can reach the team directly rather than going through layers of support.
Can I export my data from RiVault if I need to?
Yes, you can export a copy of your vault straightforwardly. The exported files come out unencrypted so you can actually open and use them, but they should be handled carefully — not left on shared drives or emailed without protection.
Does RiVault have two-factor authentication?
Yes. Beyond your regular password, RiVault requires a second authentication step using an authenticator app. Even with the right password, you still need the authenticator to get in.