Security Overview

1. Payment security

Card entry and payment authentication are handled by Stripe. Velnezo does not store raw card numbers, CVV, or full payment credentials.

Where saved payment methods are used, Stripe tokens and customer identifiers are used instead of direct card storage.

2. Data protection

Data is protected with TLS in transit, access controls, environment-based secret management, and encryption at rest where supported by the underlying infrastructure.

• Sensitive automation requires explicit user approval before high-impact actions.
• Operational access follows least-privilege principles.
• Logs and monitoring are used to investigate reliability and security events.

3. SOC 2 status

Velnezo does not claim completed SOC 2 Type II certification on this page. If a page or demo references SOC 2, it should be treated as roadmap or in-progress language until certification is independently completed.

We can provide current security details for vendor review on request.

4. Incident response

We investigate suspected security issues, take containment steps, preserve relevant evidence, and notify affected customers where required by law or contract.