Security and architecture
This page describes what's currently verifiable about Vyfoo's architecture. We'd rather tell you clearly what we can confirm than make a blanket compliance claim we can't back up.
Infrastructure
Vyfoo's backend runs on Node.js with a Supabase/PostgreSQL data layer. Supabase's own infrastructure certifications do not automatically extend to Vyfoo as an application — we don't claim SOC 2, PCI DSS, or GDPR certification for Vyfoo as a whole unless that has been independently verified and documented.
Authentication boundaries
Access to the product application and sandbox is handled by the product's own authentication system, separate from this marketing site. See Deployment for how account provisioning fits into a rollout.
Data handling
Specific data residency, retention, and processing details are confirmed during enterprise scoping, since they can vary by deployment and region.
Questions enterprise IT teams should ask
- What certifications apply to the specific infrastructure used for our deployment?
- How is data encrypted in transit and at rest?
- What does the authentication and access-control model look like for our organization?
- What's the data retention and deletion policy?
Request additional security detail through Enterprise Sales.