Trust
Security
How Vellier keeps your business's and your clients' information safe.
Last updated Sunday 1 November 2026
You trust Vellier with your clients, your prices and your money. This page explains how we look after it.
Each business has its own database
Every company on Vellier has its own separate database. One company can never see another's records, and your files are kept in your company's own folder.
Where your data is kept
The Vellier app and this website are hosted by DigitalOcean in London, and the databases are run by Neon in London (AWS eu-west-2).
Signing in
- Two-step sign-in with an authenticator app, a text or an email code
- Owners choose who must use two-step sign-in
- Accounts lock after repeated wrong passwords
- Sign-in sessions on each device can be signed out
Who can see what
- Each person sees only what their role allows
- Clients never see your costs or margins, only what you choose to send them
- Every change by Vellier's own staff is recorded in an audit log, and support access to your account needs your consent code
Backups
Our databases keep a history of every change, so a database can be put back to any moment in the last 7 days if something goes wrong.
On top of that, every night we make an encrypted copy of each database and of uploaded files, stored with a different provider from the one that runs Vellier. We keep 30 daily and 12 monthly copies, so the oldest backup is about 12 months old. Backups are only used to recover the service, and data deleted from Vellier ages out of them within about 12 months.
Reporting a problem
If you think you've found a security problem, email [email protected] with "Security" in the subject. If it involves personal data, copy in [email protected]. Please don't test against other businesses' accounts.