Security & Trust

Institutional-grade protection and a compliance-first architecture. Your data is encrypted, isolated, and under your control.

Data Encryption

All data is encrypted at rest using AES-256 and in transit via TLS 1.2+. Institutional-grade protection ensures your documents and extracted data remain confidential from upload through storage and retrieval.

Transit Security

TLS 1.2+ secures every connection. MFA via Clerk ensures only authorized users access their documents.

Privacy First

We do not sell your data. Your uploaded documents are processed and stored securely in private Supabase buckets. Extraction is powered by OpenAI's enterprise API; your data is not used for model training.

Access Control

We use Clerk for multi-factor authentication (MFA) so only authorized users access their documents. Role-based access and audit trails give you full control.

Cloud Infrastructure

VeloDoc is hosted on AWS and Google Cloud with 99.9% uptime and redundant backups. Compliance-first architecture for reliability and disaster recovery.

Questions about our security practices or compliance posture? Our security team is ready to help.

Contact VeloDoc Support