Guide
Security, in one page
A summary to attach to your vendor review. The full detail is on the security page.
Guide
Security overview
| Sign-in | Single-use email links (20 minutes); secure, HTTP-only session cookies; sign out everywhere. Single sign-on with Google or Microsoft is available on request, and an account can require it for everyone. |
|---|---|
| Roles | Manager, finance, assistant, approver, traveler; silentVIP staff. Every record is checked against its account. |
| Audit | Sign-ins, policy and role changes, cost reallocation and every approval step, with who and when. |
| Retention | Trip and billing records kept 7 years; traveler profiles deleted 90 days after a traveler leaves |
| Providers | Cloudflare (hosting, database, files, analytics); Resend (email); airlines, hotels and booking systems (per booking). |
| Incidents | Report to support@silentvip.com. Clients are told of a confirmed incident affecting their data within 72 hours. |
| Continuity | Two staffed regions (New York area and Sydney) cover each other; the portal runs on Cloudflare's global network, with point-in-time database recovery |
| Assessments | No SOC 2 or ISO 27001 report yet. Ask us for our security questionnaire answers. |
See it in the product
The demo shows this working in the portal, on a fictional company.
Already a client? Get travel support.