# Security and data protection

URL: https://vrisic.com/security/
Last updated: 2026-10-04

> How we protect your data and the AI systems we build, written plainly and without claims we cannot back up.

**Last updated:** 4 October 2026

## People and access

- Every team member signs a confidentiality agreement before working on client systems.
- Access follows least privilege: only the engineers on your project can reach your data, and access is removed when the project ends.
- Two factor authentication on all company accounts, and company managed password storage.

## Data handling

- Encryption in transit (HTTPS and TLS) and encryption at rest offered by the cloud providers we use.
- Client systems run in your cloud account or a private environment per client, in a region we agree.
- We ask for the smallest sample of data a task needs, and mask or remove personal data where possible.
- Pilot data is deleted within 30 days of the readout unless you continue.

## AI system safety

- Prompt injection and data leakage tests before launch.
- Permission aware search, so an AI system only shows people what they are allowed to see.
- Logging and review of AI actions, with human approval for actions that move money, change records or contact customers.
- Model providers are used through paid or private access that does not train on your data.

## Incidents

If we find a security incident that affects your data, we contain it, investigate and tell you without undue delay, and within 48 hours for client personal data, with what we know and what we are doing.

## Reporting a vulnerability

If you find a security issue on this website or in our services, please tell us privately and give us reasonable time to fix it before sharing it. Do not access or change other people’s data, and do not run tests that could harm the service. We will thank you and keep you updated.

- Email: [info@vrisic.com](mailto:info@vrisic.com)
- WhatsApp: [+91 63777 67206](https://wa.me/916377767206?text=Hi%20Vrisic%2C%20I%20found%20you%20on%20your%20website%20%28Privacy%20or%20legal%20question%29.%20I%20would%20like%20to%20talk%20about%20an%20AI%20project.)
- Postal address: India (remote first company)

We do not currently hold formal certifications such as ISO 27001 or SOC 2. When a project needs them, we work inside your controls or with certified hosting.

---
Vrisic · https://vrisic.com/ · Contact: info@vrisic.com · Book a call: https://vrisic.com/contact/