How we protect your clients' data
You handle sensitive financial documents for your clients. Here's exactly how Vovix Lens keeps them safe — in plain terms, and reflecting how the service actually runs today.
Your data stays in India
Documents and data live on a dedicated cloud stack in AWS's Mumbai region (ap-south-1) — inside an isolated private network we run only for Vovix Lens.
Encrypted in transit and at rest
Traffic is served over TLS with HTTP Strict Transport Security. Uploaded documents sit in private, versioned object storage encrypted with AES-256, and the server disk is encrypted at rest.
Isolated per firm
Every job, document, vendor and purchase order is scoped to your workspace and never shared across firms. That isolation is enforced in code and guarded by automated tenant-isolation tests.
Strong authentication
Passwords are stored only as bcrypt salted hashes. Sessions are capped at two devices with real server-side revocation on logout or password change, and login endpoints are rate-limited against brute force.
Hardened infrastructure
Only the TLS proxy is exposed to the internet — the database and cache are never publicly reachable. Object storage blocks all public access, cloud metadata requires IMDSv2, and admin SSH is restricted to a single IP.
Secure by build
Every change runs through automated checks before it ships: secret scanning (gitleaks), Python security analysis (bandit), and dependency-vulnerability auditing (pip-audit) — plus security headers (HSTS, clickjacking and MIME-sniffing protection) on every response.
Audit trail & human review
A maker-checker approval flow and an audit log record who changed what. And every extracted field is pinned to its exact spot on the source document and flagged for review before it can reach your books.
Privacy by default
We don't sell your data, and we don't use your documents to train models. Payments are handled by our payment processor — we never store card details. Our handling is aligned with India's DPDP Act.
We'd rather show our security than badge it
Vovix Lens is a young product, and we won't claim certifications we haven't earned. Everything on this page is implemented today and reflected in how the service runs. If you're evaluating Vovix for your firm and need more detail — or a security questionnaire completed — we're happy to help.
Email support@vovix.inLast updated: July 2026