Data security
Industry-standard encryption protects data at rest and in transit, with access controls that limit data to the people and systems that need it.
Trust
Security & Privacy
SOC 2 Type 2 · Hosted on AWS
Our commitment
VAIIL is committed to protecting the privacy and security of your credit union's data. We are a SOC 2 Type 2 attested company, and our solutions are hosted in Amazon Web Services, one of the most secure cloud platforms in the world. We maintain a comprehensive security program that covers the following areas:
Network security
Firewalls, network monitoring, and intrusion detection protect our environment from unauthorized access.
Application security
We develop and test our applications with security built into the process, not bolted on afterward.
Physical security
Our infrastructure runs in AWS data centers, which maintain strict physical access controls, monitoring, and surveillance.
Employee training
Our team is trained on security best practices, and access to client data is limited by role.
Incident response
We maintain a process to identify, respond to, and communicate about security incidents.
How we treat your data
- We only collect the data we need to provide our services.
- We encrypt data at rest and in transit.
- We monitor our systems for threats.
- We maintain a documented process for responding to security incidents.
DefaultSleuth and CU Fluent process client data under written agreements with each credit union. How we handle data collected through our websites is described in our Privacy Policy.
Continuous improvement
We regularly review our security program and update it as our products and the threat landscape evolve. We conduct security assessments to identify and address vulnerabilities, and we treat the annual SOC 2 examination as a floor, not a finish line.
Questions
Security and privacy questions, including due diligence and vendor management requests, can be sent to support@vaiilsolutions.com. We are used to working through credit union vendor due diligence and are glad to provide documentation under NDA.