Security & Trust
A responsible approach to business information
Organisations may use VIRBA to work with important business and customer information. We aim to support appropriate access, careful handling of data and clear responsibility for actions carried out through the platform.
Accounts and access
The platform's design uses authenticated accounts and organisation-related permissions to distinguish users and the work they are authorised to perform. Actual enforcement depends on the implemented backend and security controls. Customers should review membership and account access regularly.
Connected accounts and permissions
Access to external services should be authorised and limited to relevant business needs. Third-party services may impose their own permission rules, expiry conditions and technical restrictions.
Handling stored information
Information and media should be handled with security measures appropriate to their nature and applicable obligations. Descriptions of safeguards on this page must be limited to measures verified as implemented; no security system can guarantee that risks have been eliminated.
Human oversight of AI
AI-assisted recommendations and drafts may require checking before use. Where organisations use approvals or restrictions, authorised users remain responsible for applying them to their activity.
Shared responsibility
Customers should protect credentials, assign access carefully, follow internal rules, minimise unnecessary sensitive uploads and comply with laws governing information they submit or communicate.
Continuous improvement
We expect to improve features, reliability and security practices as the product develops. Planned safeguards must not be represented as already completed, audited or independently certified.
Reporting concerns
If you have a security or privacy concern, contact VIRBA through its verified support or privacy channel. Do not publish exploit details or secrets in an ordinary contact form. See Privacy Policy and Contact Support.