Security & Data

How we protect your account and your data.

Institutional teams need to know where their data goes before they sign in. This page sets out how access works, what we store, how payments are handled and where our financial data comes from.

Access

Account and team access

Sign-in is handled by Auth0, a dedicated identity provider. Vitati360 never stores your password.
Every request to the platform is checked against your account, your plan and the markets your plan covers.
Teams have owner, admin and member roles. Owners and admins control who joins, and access ends when a seat is removed.
An account is limited to one active session at a time, so a shared login is noticed rather than silently allowed.

Protection

Protecting data in transit and at the edge

All traffic to vitati360.com, the platform and the Excel add-in is encrypted with HTTPS (TLS).
Requests are rate-limited per user and per network address to blunt abuse and scraping.
Administrative changes to company data are recorded in an audit log.

Payments

Subscriptions and purchases are processed by our payment providers, PayPal and Razorpay.
Card details are entered with the payment provider and never reach Vitati360’s servers.
Payment notifications from providers are verified by signature before they change a subscription.

Your data

What we store about you

Your account details (name, email, company), your subscription and team membership, and your workspace settings such as watchlists and saved views.
We do not sell or share your data with third parties for their own use.
On plans that include AI chat, your questions are sent to our AI model provider to generate the answer, together with the figures retrieved from the platform to ground it.
Ask us at any time to export or delete your account data.

Financial data

Where the numbers come from

Financial data is taken from companies’ own filings — SEC EDGAR for US issuers, and published annual reports and regulatory disclosures elsewhere.
Every derived metric shows its formula, and every input is traceable to the disclosure it came from.
Figures are checked against the filing, and any open check is flagged on the number itself.

Reporting a security issue

If you believe you have found a vulnerability, email [email protected] with the subject “Security”. We acknowledge reports within one business day and ask that you give us reasonable time to fix an issue before disclosing it.

Vendor assessments

Procurement or information-security team reviewing us? Send your questionnaire and we will complete it.