Security
Built to protect
the businesses we serve.
Our customers trust us with their calls, schedules, prices and customer records. Here's how we keep that information safe.
How we protect data
Encryption. Data is encrypted in transit with TLS and at rest by our hosting providers.
Least-privilege access. Staff and systems get only the access their work needs, and access is removed when it no longer is.
Separated customers. Each business's records are kept apart, and every request is checked against the account it belongs to.
Secrets managed centrally. Keys and passwords live in a secrets manager, never in code.
Tested changes. Every change runs against our full automated test suite before it ships, with dedicated checks for permissions and data handling.
Audit trails. Changes to business records are logged, so we can see who changed what and when.
Companies that process data for us
We use a small number of well-established providers. Each processes data only to deliver its part of our service:
Cloudflare: hosting, networking and file storage.
Supabase: database hosting.
Google Cloud: infrastructure and AI models (Gemini).
Anthropic: AI models (Claude).
OpenAI: AI models (GPT).
Twilio: phone calls and text messages.
Google Workspace: our own email.
Outside AI providers process data only to complete a task and do not train their models on our customers' data.
Reporting a security issue
If you believe you've found a security problem in our software or site, email hello@vilozi.com with "Security" in the subject. Please give us a reasonable chance to fix it before telling anyone else. We'll reply within two business days.
More on data handling in our Privacy Policy.
Security by design
Encrypted
In transit and at rest.
Least privilege
Access limited to the people who need it.
Tested
Every change checked before release.
Audited
Changes to records are logged.
Security questions?
Write to us and an engineer will answer.