Encryption at Rest
Your data is encrypted while it sleeps in our secure data centers. We use AES-256 encryption, the same standard used by major financial institutions to protect sensitive information.
We believe you should focus on building your business, not worrying about who’s looking at your files. Vitalux treats your data with the same care and respect as you do.
Security isn't just a feature for us; it's the foundation of the Vitalux experience. We've built our architecture from the ground up to keep your information private, protected, and yours alone.
We understand that as a small business owner or freelancer, your data is your most valuable asset. Whether it's client contracts, financial records, or personal contacts, Vitalux acts as a silent guardian, ensuring that your digital life remains yours and yours alone.
Your data is encrypted while it sleeps in our secure data centers. We use AES-256 encryption, the same standard used by major financial institutions to protect sensitive information.
Every time you log in or sync your data, your information travels securely via TLS 1.3. We ensure that no one can intercept or read your data as it moves between your device and our servers.
We are proud to be SOC 2 Type II compliant. Our systems, processes, and controls have been rigorously tested and verified by independent auditors to meet the highest standards of security and availability.
We take privacy seriously. Vitalux is designed with "privacy by design" principles, ensuring full compliance with GDPR in Europe and CCPA regulations in California. You have full control over your personal data.
Add an extra line of defense to your account with 2FA. We support authenticator apps (like Google Authenticator) and SMS codes, so even if a password is guessed, your account stays locked.
We believe transparency is key. Our bug bounty program encourages security researchers to find vulnerabilities responsibly. If you find a security issue, we want to know about it so we can fix it immediately.
We hold your data only as long as necessary to provide our service. You can request a complete export of all your data at any time, or request that it be permanently deleted from our servers.
Our security team is here to help. Whether it's a technical question or a specific compliance concern, we're happy to chat.