Security

Your business data deserves enterprise-grade protection. Here's how we keep it safe.

Encrypted in transit and at rest

Connections to VinoyOS use TLS. Data is encrypted at rest by our database and hosting providers.

Established infrastructure

VinoyOS runs on established, enterprise-grade cloud infrastructure. Card payments go through a PCI-compliant payment processor, so we never see or store card numbers.

Your business's data stays yours

Every business's data is isolated with row-level security. You can export everything we hold for your business at any time and ask us to delete it.

No ad sharing, no public model training

Your data is never sold or shared with advertisers, and your calls and customer details are never used to train public AI models.

Healthcare and regulated industries

We are working toward support for healthcare practices that need a Business Associate Agreement. Until that is in place, please do not send protected health information through VinoyOS. Contact us if you would like to be notified.

Who handles your data

A small number of vetted providers process data on our behalf, each under its own privacy and security terms. If your business needs the full list for compliance or procurement, email ops@nozudigitaltechnologies.com and we will send it.

What we have and have not done

Every table in our database has row-level security, and we run a check that signs in as one business and confirms none of another business's rows are visible.
Visitors who are not signed in have no direct access to our database tables.
We have not completed a SOC 2 audit or an independent penetration test yet. We will publish a summary when we do. If your business needs either before you sign up, tell us.

Report a problem

If you think you have found a security issue, email ops@nozudigitaltechnologies.com. Please give us a reasonable chance to fix it before sharing it publicly.