Security
Your customer data,
handled with care.
Veermo processes sensitive customer health data. We treat security as a core product requirement, not an afterthought.
Our practices
How we protect your data at every layer
Encryption everywhere
All data is encrypted in transit with TLS 1.2 or higher and at rest with AES-256. Database backups are encrypted with the same standard. No exceptions.
SOC 2 Type II
Veermo has completed a SOC 2 Type II audit covering security, availability and confidentiality. Ask us for a copy of the report under NDA.
GDPR ready
We offer a Data Processing Agreement, support data subject access requests and store EU customer data in EU-based infrastructure on request.
Data handling
Read-only integrations
Veermo reads data from your connected tools. It never writes to, modifies or deletes records in Stripe, HubSpot, Salesforce or any other source.
Data retention
Customer data is retained for the duration of your subscription plus 30 days. After that, all data is permanently deleted. You can request earlier deletion at any time.
Access controls
Role-based access controls limit who on your team can see what. Enterprise plans include SSO and SCIM provisioning for centralized identity management.
Responsible disclosure
If you discover a security vulnerability in Veermo, please report it to [email protected]. We will acknowledge receipt within 24 hours and work with you to understand and resolve the issue. We do not pursue legal action against researchers who act in good faith.
Questions about security?
We are happy to walk through our practices, share our SOC 2 report or discuss specific compliance requirements.