Security
How we look after your data and your customers.
Velogics talks to your customers on your behalf, so how it handles their data matters. Here's what's in place today, stated plainly.
Data protection
Sensitive data, protected.
The safeguards between your account, your connected tools and the outside world.
Encrypted at rest
Credentials for your connected accounts and message content are encrypted at rest with AES-256.
Verified webhooks
Webhooks coming in from connected services are checked for a valid signature before Velogics acts on them.
Signed, expiring links
Sensitive actions use signed links that expire, like the Owner Agent's one-tap links for sending quotes and invoices.
Rate limiting
Requests are rate limited, which slows down abuse and automated attacks.
Access control
The right access for each person.
Each person on your team gets the access they need, and changes leave a record.
Role-based access
Each teammate gets a role, and a role only sees and does what it's allowed to.
Login protection
Repeated failed logins lock the account, and anomaly detection watches for unusual activity.
Idle logoff
Sensitive accounts are signed out after a period of inactivity.
Audit logs
Actions by Velogics staff, including any time we sign in to your account for support, are recorded in an audit log.
Messaging compliance
Texting and email, done properly.
Velogics messages your customers for you, so consent and opt-outs are built into how it works.
Texting consent (TCPA)
Consent to receive texts is captured, and automated texting respects it.
Opt-out replies
STOP and similar replies opt people out automatically, and START opts them back in.
Do-not-contact lists
People on a do-not-contact list aren't sent outreach.
Quiet hours
Automated outreach respects quiet hours, so nobody gets a text late at night.
Email unsubscribe (CASL)
Outreach emails include an unsubscribe link, and unsubscribes are honoured.
AI safeguards
The AI works for you, and you stay in charge.
Chat and forms are upfront about AI, and you can step in whenever you like.
AI disclosure
Web chat and forms say up front that AI is involved, with a link to your privacy policy.
Human takeover, any time
Reply in any thread and the AI steps back, so a customer never gets two answers.
You approve public replies
Review replies are drafts until you approve them. Nothing is posted to Google on its own.
Hosting and sub-processors
Where your data lives.
Velogics data is hosted in the United States, on Vercel and Neon. Every company that processes data for us is listed on our sub-processors page.
Built on
- Vercel · Hosting
- Neon · Database
- Twilio · Phone and texting
- ElevenLabs · AI voice
- Anthropic · AI models
- Postmark · Email
- Stripe · Billing
Current status
What we don't claim yet
Velogics does not have a SOC 2 report today, and we don't claim HIPAA compliance. Our data is hosted in the United States, not in Canada. If your business needs any of these, talk to us before you commit, and we'll tell you where things stand.
Contact
Security questions
Have a question about how Velogics handles data, or need details for a vendor review? Email us and we'll get back to you.
sales@velogics.aiOther ways to reach usFAQ
Common questions
Do customers know they're talking to an AI?
On web chat and forms, yes: the chat's first screen says an AI assistant is responding, and forms carry a notice that service providers, including AI, handle the message. On phone calls, the greeting is set up with you.
Can I use Velogics with health information?
Talk to us before you do. We don't claim HIPAA or PHIPA compliance today.
Is there a data processing agreement?
Yes. Our standard Data Processing Agreement is part of our Terms of Service and applies whenever Velogics processes your customers' personal data on your behalf.
What happens to my data if I leave?
Your data stays in your account, so you can pick up where you left off if you come back. Ask us at any time to export it or to delete your account, and we'll complete the request within 30 days. Records the law requires us to keep, such as billing records, are kept.
See how Velogics works, safely.
Book a demo and we'll show you the controls on a live call, from human takeover to review approvals.