Security

Your business data deserves enterprise-grade protection. Here's how we keep it safe.

AES-256 Encryption

All data is encrypted at rest and in transit using AES-256. TLS 1.3 protects all API communication.

Supabase Infrastructure (AWS)

VinoyOS runs on Google Cloud via Firebase, benefiting from Google's world-class physical security, SOC 1/2/3, and ISO 27001 certifications.

HIPAA-Ready Architecture

Our platform supports HIPAA-compliant deployments for healthcare verticals, including PHI encryption, audit logging, and BAA availability.

A2P 10DLC SMS Registration

All SMS is sent via Twilio with full A2P 10DLC registration, ensuring carrier compliance and deliverability.

Zero Third-Party Data Sharing

Your data is never shared with third-party advertisers. Your conversation data never trains public AI models. Period.

SOC 2 — In Progress

We are actively pursuing SOC 2 Type II certification to formally validate our security controls and processes.