Protecting Your Data, Inside & Out

Vitally customers can add organizational-level security to ensure authorized access to the platform.

Admins can assign permission levels to manage who has access to settings and data in the Vitally platform.

Users are required to create complex passwords while all credentials are salted, hashed, and encrypted-at-rest (bcrypt).

All data at rest is encrypted with AES-256 while data in-transit is protected over TLS encryption.

Vitally uses AWS data centers for hosting services and data in the United States (us-east-1, us-east-2), and EU (eu-north-1).

Vitally contracts 3rd party security organizations to perform annual pentesting on our platform.

Vitally is committed to providing best-in-class product experiences with our engineering team on-call to respond to any incidents.

Vitally has been tested and audited for SOC 2 (Type 2) compliance. For a copy of Vitally’s SOC 2 report, contact privacy@vitally.io.

Vitally provides resources and tools for customers to maintain GDPR compliance. Learn more here.

All payments are processed through Stripe, our third-party partner. To learn more about Stripe’s security and PCI compliance measures, visit: stripe.com/docs/security