( Trust ) / Security — Trust through explicit controls

Protect the evidence your team depends on.

Viali combines tenant-scoped access, encrypted infrastructure, activity logging and operational monitoring with customer-controlled workflows.

Viali is actively progressing through a formal SOC 2 readiness program. Our infrastructure providers maintain their own independent compliance programs, while Viali remains responsible for application-level controls and organizational practices.

Current controls

Security across product, people and operations.

Tenant-scoped access

Workspace access is scoped to the authorised tenant and role. Customers manage users and permissions within their account.

Encrypted infrastructure

Data is protected in transit using TLS and through encrypted hosting infrastructure at rest.

Access governance

Production access is restricted according to least privilege, protected with multi-factor authentication and reviewed.

Audit and activity logs

Security-relevant and application activity is logged to support investigation, accountability and operational review.

Monitoring and response

Operational monitoring supports detection and response. Incident handling is designed to contain, investigate and remediate issues.

Secure development

Development practices include dependency and secret scanning, controlled changes and review before production release.

Data control

Customer workflows support data export and deletion controls subject to contractual, backup and legal requirements.

Provider responsibility

Infrastructure-provider controls complement but do not replace Viali’s responsibility for application and organisational security.

Shared responsibility

Security also depends on how a workspace is configured.

Customers are responsible for authorised users, strong authentication, integration permissions, lawful data, endpoint security and prompt removal of access that is no longer required.

Responsible disclosure

Found a potential vulnerability?

Send a clear description and reproduction steps to sid@viali.ai. Please avoid accessing, changing or retaining customer data while researching.

Procurement

Need security information for procurement?

Contact Viali for current security documentation and the status of the SOC 2 readiness program. Email sid@viali.ai or use the contact page.