Security

Built to earn your trust

Your customer testimonials and data are precious. Here's how we protect them.

Encryption in transit & at rest

All data is encrypted in transit with TLS 1.3. Data at rest is encrypted using AES-256. API keys are hashed and never stored in plaintext.

Infrastructure

Hosted on Vercel and Supabase with SOC 2 Type II compliant infrastructure. Databases are isolated per environment with strict network policies.

Access controls

Role-based permissions enforced at the API layer. Workspace isolation ensures users can only access their own data. Auth powered by Clerk.

Backups

Automated daily database backups with 30-day retention. Point-in-time recovery available for disaster recovery.

Vulnerability disclosure

We take security reports seriously. If you discover a vulnerability, please email support@vouchworx.com and we'll respond within 24 hours.

Data processing

We are GDPR-compliant. You can request a Data Processing Agreement (DPA). Data is processed in the EU and US depending on your region.

Report a vulnerability

Found a security issue? We're grateful. Email us at support@vouchworx.com with details and we'll respond within 24 hours.

Security — VouchWorx | VouchWorx