A breach at Vaulty can't leak your database

We will not tell you we cannot be breached; nobody honest can. What we can tell you is exactly what an attacker on our side would and would not find. They would not find your ERP, your accounting, your files or your mail, because none of them were ever copied to us. They would not find the credentials to your systems, because those live on the node in your network, not with us.

What is on our side, and how it is kept

On our side are the conversations your people had with the agent, the facts and rules it learned about your company, and the accounts of your users. They are stored in the European Union, encrypted at rest and in transit, and separated per company at the database level, so that one company's data cannot be read through another's account. Sign-in uses a one-time code sent by email, so there is no password of yours to steal from us.

What this does not mean

It does not mean a breach would be harmless. Answers and learned facts are about your business, and we treat them as confidential. It means the thing you fear most, your systems in someone else's hands, is not what sits on our servers. If you ever want to know what we hold for you, ask, and you will get the list.