Data at Rest
Customer data is fully encrypted. Even before it reaches our databases, it's encrypted at rest, ensuring maximum security against both physical and logical access attempts.
Data in transit
Velt uses TLS 1.2 or higher everywhere data is transmitted over potentially insecure networks.
Secret Management
Application secrets are encrypted and stored securely via Google Secrets Manager and access to these values is strictly limited.
Endpoint protection
All corporate devices are centrally managed with anti-malware and equipped with Mobile Device Management (MDM) for secure configuration, including disk encryption, screen locks, and software updates. Our security alerts are monitored 24/7/365.
Security education
Velt provides comprehensive security training to all employees upon onboarding and annually through educational modules with Vanta’s platform.
Identity and access management
Secure and streamlined access with Google SSO. We use multi-factor authentication (MFA) and role-based access control, ensuring employees only have access to necessary applications. Access is automatically revoked upon termination.
Privacy Policy and DPA
Regulatory compliance
Velt evaluates updates to regulatory and emerging frameworks continuously to evolve our program.