Security

A short summary of how Vitna protects information. Details live in the privacy policy and the data processing agreement.

In transit and at rest

• Everything between the app and the Vitna service travels over TLS.
• Files (photos, voice notes, videos, documents) are stored on the hosted Supabase platform in private buckets; access is checked against your organisation on every request.
• Reports you export are yours: shared links, where used, are signed and expire.

Access

• Your jobs, evidence and reports are scoped to your organisation. Other accounts cannot read them.
• Vitna’s own staff access production data only when you ask for support, and only what is needed to help.

AI drafting

Report drafts are generated by our AI processor (named on the sub-processors page) from the evidence on the job. Drafts you do not keep are not retained by Vitna as documents; you decide what becomes a document.

If something goes wrong

Email [email protected] immediately. We investigate every report and notify affected business customers of personal data breaches without undue delay.

Responsible disclosure

We welcome security reports at [email protected]. Please do not access or download data that is not yours.