Security is a shared responsibility, and this whitepaper sets out exactly what VEPSuite does to protect your organisation and what you control.
It covers access control, encryption in transit and at rest, audit logging, backup and recovery, and our approach to regional compliance.
Key takeaways
- Role-based access down to the action level
- Encryption in transit and at rest
- Immutable audit logs for every financial action
- Documented backup and recovery objectives
- Regional data residency options
Access control
Every user gets the least privilege they need. Permissions are enforced at the module, record, and action level, and every change is logged.
Administrators can review access at any time and revoke it immediately.
Encryption and data handling
Data is encrypted in transit using modern TLS and at rest using industry-standard encryption. Backups are encrypted with the same standard.
We retain data only as long as needed and support regional residency for organisations with local requirements.
- TLS for data in transit
- Encryption at rest for stored data and backups
- Configurable data retention
- Regional residency options
Audit logging and recovery
The platform keeps an unalterable log of financial actions, so you can reconstruct who did what and when. Recovery objectives are documented and tested regularly.
