Your information is protected
The security of your company's data is our priority. These are the measures we implement to keep your information safe at all times.
SSL/TLS encryption
All traffic between your browser and our servers is encrypted with TLS 1.3. We never transmit sensitive data in plain text.
Secure infrastructure
Your data is stored in Supabase (managed PostgreSQL), with encryption at rest using AES-256. The data centers are SOC 2 Type II compliant.
Daily backups
We perform automatic daily backups of the entire database. Backups are stored encrypted and retained for 30 days.
Secure authentication
Access to the system requires authentication with passwords hashed using bcrypt. We support email + password authentication with signed sessions.
Access control
VORTA's internal team accesses production infrastructure only via SSH keys, with mandatory multi-factor authentication (MFA).
Data isolation
Each client operates in its own data space. PostgreSQL Row Level Security (RLS) policies guarantee that no client can access another client's data.
Audits and monitoring
We actively monitor the system for unusual activity. Security incidents are communicated to affected users within 72 hours.
Regulatory compliance
We follow OWASP Top 10 best practices for secure web application development. Our technical stack is audited regularly.
Found a vulnerability?
If you discover a security issue, we ask that you report it responsibly before making it public. Our team will address it as a priority.
admin@vorta.mx