Guide
Security, in one page
A summary to attach to your vendor review. The full detail is on the security page.
| Sign-in | Single-use email links (20 minutes); secure, HTTP-only session cookies; sign out everywhere. No SSO yet. |
|---|---|
| Roles | Manager, finance, assistant, approver, traveller; silentVIP staff. Every record is checked against its account. |
| Audit | Sign-ins, policy and role changes, cost reallocation and every approval step, with who and when. |
| Retention | Trip and billing records kept 7 years; traveller profiles deleted 90 days after a traveller leaves |
| Providers | Cloudflare (hosting, database, files, analytics); Resend (email); airlines, hotels and booking systems (per booking). |
| Incidents | Report to support@silentvip.com. Clients are told of a confirmed incident affecting their data within 72 hours. |
| Continuity | Two staffed regions (New York area and Sydney) cover each other; the portal runs on Cloudflare's global network with daily database backups |
| Assessments | No SOC 2 or ISO 27001 report yet. Ask us for our security questionnaire answers. |
See it in the product
Every guide matches what the portal does. The demo shows it working.