Security and privacy

In short

• The Privacy page of your company opens with where your data is stored, how often someone at Vallit opened it, and the download.
• Below it: what Vallit keeps and for how long, who at Vallit opened your data, which services work on it and where, and the ways to delete it.
• An admin downloads the company's data as one file. Anyone downloads their own account data under Security.

Where in the app

Open the account menu at the foot of the sidebar, click Settings, then Privacy under Company. Your profile shows the menu. Every member of the company reads the page.

DesktopPhone

Step by step

1. Read the row at the top

   The first fact is the place: Where the database runs. The second is how often someone at Vallit opened your data in the last 90 days. Take it with you holds the download.

2. See what we keep

   Under What we keep, each row shows how many there are of one kind of data and a bar of how long it stays. A bar that runs to the end stays as long as what it belongs to, such as Until you remove the app; a bar that comes apart into dots is deleted after a time, such as 90 days.

3. See who at Vallit opened it

   Under Who at Vallit opened it, the strip has one bar per day of the last 90; a tall bar is a day someone at Vallit opened your data. Each row below says what was done, by whom, for which app and when. When nobody looked, the strip stays flat and a check mark says so.

4. See where it is stored

   Under Where it is stored, the services that work on your data for us stand under the place where they work: Frankfurt, the USA or Ireland. Full list with safeguards opens the public list with company names, and Data Processing Agreement opens the agreement.

5. Download the company's data

   In the row at the top, under Take it with you, click Download. A JSON file named after your company and the day is saved. Only an admin can download it; for a member the button is greyed out.

6. Download your own account data

   Click Security under Profile. In the row at the top, under Take it with you, click Download.

   

   

   

   

7. Delete

   At the foot of the page, Remove an app, Delete the company and Delete your account each lead to the place where you do it. Your company and Your profile walk through the deletes.

What happens behind the scenes

• The counts are read when the page opens, from your company's own rows only.
• The list of who opened your data is written by our console each time someone at Vallit opens or changes one company's data. Nobody can edit or remove a row of it, and each row is chained to the one before it, so a removed row would show. That is what Sealed beside the title means.
• The company file holds every row we keep for the company, in the groups of What we keep. Measurements come summed per day. The staff list and the people of the company with their roles are in it too.
• The file leaves out secret links to reports, trust pages and client reports, and the code that confirms a domain. Anyone holding one could open what it guards.
• Keys and passwords in findings, failed checks and links are masked in the file, as in the report.
• Your account file holds your name, email addresses, connected accounts, devices and companies. It says whether you have a password, never the password.
• Every night we make an encrypted copy of all data and keep it for 14 days. What you delete is gone from every copy 14 days later.
• Names, email addresses, passwords and devices are kept by our sign-in service. Card details are kept by Stripe and never reach us.
• Privacy and safety explains what Vallit reads from your app and sends to AI.

If something goes wrong

Related