Security
Built to protect what matters.
Security is boring until it isn't. Here's a plain-English summary of how we keep your data safe — not marketing buzzwords.
Encryption everywhere
All data is encrypted in transit with TLS 1.3 and at rest with AES-256. Secrets are stored in a managed KMS.
Modern auth
OAuth, magic links, or password with bcrypt. SSO (SAML) available on Team and Enterprise plans.
Data minimization
We only collect what's necessary to run the Service. Logs are retained for 30 days and then purged.
No training on your data
Your drafts, prompts, and brand voices are never used to train models — ours or any third party's.
Audits & compliance
SOC 2 Type II audit in progress. GDPR and CCPA compliant. Subprocessors list on request.
Regional hosting
EU and US regions available. All infrastructure runs in ISO 27001 certified data centers.
Responsible disclosure
Found something? We appreciate responsible disclosure and respond within one business day. Email security@veloraz.ai.