Enterprise Security

Infrastructure Security

Our infrastructure is hosted on AWS, utilizing highly secure data centers with physical access controls, biometrics, and 24/7 security guards. Network traffic is isolated using Virtual Private Clouds (VPCs), and strict firewall rules are enforced at all ingress and egress points.

Data Encryption

• In Transit: All data transmitted between clients and our servers is encrypted using TLS 1.3 with Perfect Forward Secrecy (PFS).
• At Rest: All databases, backups, and object storage are encrypted at rest using AES-256 encryption. Key management is handled via AWS KMS with regular automated key rotation.

Compliance & Audits

We undergo regular, independent third-party audits to verify our security posture.

• SOC 2 Type II: We maintain a clean SOC 2 Type II report evaluating our security, availability, and confidentiality controls.
• GDPR & CCPA: Our data handling processes are fully compliant with major global privacy frameworks.
• HIPAA: For our MedFlow healthcare solution, we offer Business Associate Agreements (BAAs) and fully HIPAA-compliant environments.

Vulnerability Management

We run continuous automated vulnerability scans across our codebase and infrastructure. Additionally, we contract with top-tier security firms to conduct manual penetration tests bi-annually. We also maintain a responsible disclosure bug bounty program.

For detailed security documentation or to request a copy of our latest SOC 2 report, please email security@verydash.com.