Trust · Security
Protect the evidence your team depends on.
Viali combines tenant-scoped access, encrypted infrastructure, activity logging and operational monitoring with customer-controlled workflows.
Viali is actively progressing through a formal SOC 2 readiness program. Our infrastructure providers maintain their own independent compliance programs, while Viali remains responsible for application-level controls and organizational practices.
Current controls
Security across product, people and operations.
Tenant-scoped access
Workspace access is scoped to the authorised tenant and role. Customers manage users and permissions within their account.
Encrypted infrastructure
Data is protected in transit using TLS and through encrypted hosting infrastructure at rest.
Access governance
Production access is restricted according to least privilege, protected with multi-factor authentication and reviewed.
Audit and activity logs
Security-relevant and application activity is logged to support investigation, accountability and operational review.
Monitoring and response
Operational monitoring supports detection and response. Incident handling is designed to contain, investigate and remediate issues.
Secure development
Development practices include dependency and secret scanning, controlled changes and review before production release.
Data control
Customer workflows support data export and deletion controls subject to contractual, backup and legal requirements.
Provider responsibility
Infrastructure-provider controls complement but do not replace Viali’s responsibility for application and organisational security.
Shared responsibility
Security also depends on how a workspace is configured.
Customers are responsible for authorised users, strong authentication, integration permissions, lawful data, endpoint security and prompt removal of access that is no longer required.
Responsible disclosure
Found a potential vulnerability?
Send a clear description and reproduction steps to sid@viali.ai. Please avoid accessing, changing or retaining customer data while researching.
Procurement
Need security information for procurement?
Contact Viali for current security documentation and the status of the SOC 2 readiness program. Email sid@viali.ai or use the contact page.