Data Privacy & Security

1.Introduction

At Vivgram, we understand that your research data is sensitive and valuable. This page summarizes how we protect your data through encryption, tenant isolation, and enterprise-grade cloud infrastructure. Detailed security architecture and implementation documentation is available to customers and qualified prospects under NDA — see Full Security Documentation below.

2.Data Protection at a Glance

2.1 Encryption

All customer data is encrypted both in transit and at rest using industry-standard protocols.

2.2 Enterprise-Grade Cloud Hosting

Vivgram runs on a leading hyperscale cloud infrastructure provider that holds SOC 2 Type II, SOC 3 Type II, CSA STAR Level 1, and GDPR compliance certifications with a published Data Processing Agreement. Vivgram is cloud-only — no customer data is stored on local devices or on-premises servers.

2.3 Tenant Isolation

Vivgram uses a multi-tenant architecture with logical data isolation. Every record is tagged to a tenant, and every query is scoped to the authenticated user's organization, so users can only access data belonging to their own organization.

2.4 Access Control

Access is protected by hashed passwords, optional multi-factor authentication (MFA), and role-based permissions that grant users the minimum access necessary for their role. All access and changes are logged for audit purposes.

2.5 Data Retention & Deletion

We retain customer data for the duration of your service agreement. Upon termination or request, active data is deleted within 30 days and purged from backups within 90 days. A data export is available beforehand, and deletion confirmation is provided on request.

2.6 Incident Notification

3.Full Security Documentation

Detailed documentation — covering our security architecture, encryption and key management, network controls, monitoring and logging, tenant-isolation design, and our shared-responsibility matrix, along with evidence of our hyperscale provider's SOC 2 Type II, SOC 3 Type II, and CSA STAR Level 1 posture — is available under NDA to customers and qualified prospects.

4.Contact Us

If you have questions about our data privacy and security practices, or to report a security concern: