Information Security Overview

Last Modified: October 5, 2026

This overview describes the principles Velosity uses to protect systems and information supporting the Velosity Business OS. Controls may vary by service, environment, customer configuration, and risk. Contractual security obligations are governed by the applicable customer agreement.

1. Security governance

Velosity maintains safeguards designed to protect the confidentiality, integrity, and availability of information. Controls are reviewed as the Service and relevant risks change.

2. Access and data protection

Access is based on job responsibilities and least privilege, reviewed periodically, and revoked when no longer required. Administrative production access uses strong authentication where supported. Industry-standard encrypted protocols protect data in transit over public networks, sensitive information is protected at rest as appropriate to its system and risk, and secrets are managed separately from source code.

3. Secure operations and incident response

Production changes are reviewed, tested, tracked, and deployed through controls appropriate to the change. Logging, monitoring, anti-abuse controls, and vulnerability management help identify risk. Velosity maintains processes to investigate, contain, remediate, and learn from security incidents and provides notice as required by law and contract.

4. Customer responsibilities and inquiries

Customers help protect data by managing access, protecting credentials, configuring integrations carefully, and reporting suspected compromise. See the Acceptable Use Policy. Send security questions through our contact form; do not include passwords, private keys, or exploit code in an initial submission.