Encryption everywhere
TLS 1.3 in transit, AES-256 at rest. No exceptions, no tier gating.
Trust & Security
Trust by default. Not as an upsell.
Visneo handles your store's most sensitive data: sales, margin, customers. We hold ourselves to the standard enterprise buyers demand, even while we're still pre series A.
Controls
How your data is protected.
Least privilege access
Every internal role is scoped to the minimum permission needed. No one on our team can browse your data without a reason.
Tenant isolation
Your data lives in its own isolated tenant. We never commingle customer data for training or analysis.
Audit logs
Every admin action is logged with actor, timestamp, and scope. Available to Enterprise tier on request.
US based infrastructure
All infrastructure runs in US AWS regions. Data residency options for Enterprise on request.
Backup & recovery
Daily encrypted backups with 30-day retention. Point in time recovery for the last 7 days.
Compliance
Where we are on the roadmap.
We're small and honest. Here's where we are, not where we wish we were.
SOC 2 Type II
On the roadmap for Q4 2026. We operate to SOC 2 controls today and engage auditors in Q3 2026.
GDPR aligned
Data subject request handling, deletion workflows, and DPAs available on request.
CCPA compliant
California consumer data rights respected. Opt out mechanics available for applicable customers.
Privacy
Privacy policy, summarized.
The plain English version: your store's data belongs to you. We don't sell it, share it, or use it to train public models. The full Privacy Policy is published — version 1.0, effective 31 July 2026, the same document customers agree to in the Visneo dashboard.
What we collect
Transactional data you explicitly connect (POS, accounting, payroll), account metadata (name, email, company), and product telemetry (which features you use, how often). No cookies beyond session management.
What we don't do
We don't sell your data. We don't share it with advertisers. We don't train public models on it. We don't commingle your data with other tenants for aggregate analysis without explicit opt in.
Terms of service
Core principles: mutual cancellation rights, data portability on exit, no lock in clauses. The full Terms of Service is published — version 1.0, effective 31 July 2026.
Data processing agreement
DPA available on request for any customer handling EU-resident data. We sign your paper or ours.