Security

Security is considered throughout the development lifecycle—not added after features are built.

When developing new functionality, we evaluate:

• User authentication
• Access permissions
• Data protection
• API security
• Infrastructure security
• AI behavior
• Privacy considerations
• Logging and monitoring

Our goal is to build secure features from the beginning while maintaining a simple and intuitive user experience.

Protecting user accounts is essential.

Depending on the services being used, Vevisto AI may support:

• Secure account authentication
• Password protection
• One-Time Passcodes (OTP)
• Multi-Factor Authentication (MFA)
• Secure login sessions
• Identity verification workflows
• Organizations determine which authentication methods are appropriate for their users.

Organizations maintain control over who can access their information.

Vevisto AI supports role-based permissions that allow organizations to assign access based on each user’s responsibilities.

Examples include:

• Administrators
• Managers
• Employees
• Receptionists
• Customer support staff
• Healthcare providers
• Patients
• Clients
• Customers
• This helps ensure users have access only to the information necessary for their role.

We implement security practices designed to help protect customer information during storage and transmission.

Depending on the services being used, these practices may include:

• Encrypted communications (HTTPS/TLS)
• Encryption of stored data where appropriate
• Secure authentication tokens
• API authentication
• Secure backups
• Infrastructure monitoring
• Access controls
• Session management
• Our security program evolves continuously as technology and threats change.

Artificial intelligence operates within the permissions established by each organization.

AI assistants are designed to access only the information authorized by the customer.

Organizations control:

• Knowledge sources
• Uploaded documents
• Customer information
• Internal documentation
• User permissions
• One organization’s AI assistant is not designed to access another organization’s information.

Vevisto AI is built using modern cloud infrastructure designed to support security, scalability, and availability.

Our platform is designed to support:

• High availability
• Regular backups
• Disaster recovery planning
• Infrastructure redundancy where appropriate
• Performance monitoring
• System health monitoring

Although no service can guarantee uninterrupted availability, we continually invest in improving reliability.

Customers may choose to connect trusted third-party services to Vevisto AI.

Examples include:

• Calendar providers
• Email providers
• SMS providers
• Electronic Health Record (EHR) systems
• CRM platforms
• Authentication providers
• Accounting software
• Cloud storage services
• Customers control which integrations are connected and what information is synchronized.

To help improve security and accountability, Vevisto AI may maintain logs relating to platform activity.

Examples include:

• Login events
• Authentication attempts
• Account changes
• Administrative actions
• API activity
• Security events
• System errors
• These logs help identify potential issues, improve security, and support troubleshooting.

Security is a shared responsibility.

While Vevisto AI is responsible for securing the platform, customers also play an important role by:

• Using strong passwords
• Enabling Multi-Factor Authentication where available
• Managing user permissions
• Removing inactive accounts
• Protecting their devices
• Keeping contact information up to date
• Reporting suspicious activity promptly

Organizations remain responsible for securing their own internal systems, networks, and devices.

Vevisto AI is designed to support organizations across many industries.

Some industries—including healthcare, legal services, finance, insurance, and education—may require additional safeguards or compliance measures.

Organizations remain responsible for determining whether their use of the platform satisfies applicable legal and regulatory requirements.

Where appropriate, Vevisto AI provides features designed to support secure workflows, identity verification, access management, and audit logging.

Security is an ongoing process.

As technology evolves, we continually review and improve:

• Platform architecture
• Authentication methods
• Infrastructure
• AI safeguards
• Monitoring tools
• Internal security practices
• We regularly evaluate opportunities to strengthen the platform and reduce risk.

If you believe you have identified a security vulnerability or suspect unauthorized access to your account, please notify us as soon as possible.

Responsible disclosure helps us investigate and resolve issues quickly.

For security-related questions or to report a security concern, please contact:

VevistoAI LLC