Security

Last updated: August 20, 2026

Access controls

Velotix uses authenticated access and server-side authorization controls for protected application data. Access should be limited according to the permissions available to the signed-in user.

Data protection

Data is transmitted over encrypted connections where supported by the service infrastructure. Secrets and service credentials should be kept in protected server-side environment variables rather than client code.

Database security

Database access is protected through authentication and row-level authorization policies where applicable. Production policies should be reviewed whenever new tables, workflows, or integrations are introduced.

Integrations and webhooks

Webhook endpoints and third-party integrations can expose sensitive business data. Users are responsible for configuring trusted destinations and avoiding secrets or unnecessary personal data in webhook payloads.

Reporting a security issue

If you believe you have found a security issue, please contact nexora37ai@gmail.com with enough detail for the issue to be investigated. Please do not publicly disclose an unresolved vulnerability before we have had an opportunity to review it.

This page describes the current product approach and is not a certification or guarantee of security. A formal security review should be completed before enterprise or regulated use.