Security Policy

This policy describes the security approach for Vetigen Incorporation services. Control coverage may vary by feature and integration. Service availability and separately agreed support commitments are governed by the applicable contract/SLA.

• Session/authentication controls, user permissions and clinic access boundaries are applied. Knowing a record identifier alone does not confer access.
• Clinics should keep user and role assignments current, remove access for departing staff and secure their devices/accounts.
• Revoking sessions and disabling devices on an account deletion request is part of the access lifecycle.

Service access uses HTTPS. File access is assessed against relevant user and clinic permissions. Veti and integrations are subject to the permissions and data scope required for the operation. Local security for Cortex and connected resources on a clinic computer also requires action by the clinic.

This page does not provide a blanket guarantee of identical encryption versions, key rotation intervals, backup frequency or recovery times across all systems. You may request details of the technical and organizational measures needed for your service.

Application operation and error records may be used to investigate unauthorized access and service issues. Logs may contain personal data and are subject to purpose-limited access and retention. Do not share passwords, verification codes or unnecessary owner information during a security investigation.

When an incident is reported, its scope, affected data and access paths are assessed and necessary containment/remediation steps determined. Personal data breach notifications to authorities, controllers and affected people follow applicable law and contractual obligations. In the processor role, the clinic must be informed without undue delay.

An infrastructure provider’s certification does not mean all Vetigen products hold that certification. This page does not claim Vetigen ISO 27001, SOC 2 or HIPAA certification, regular independent penetration tests or continuous staffed monitoring. Request current, scoped documentation for procurement reviews.

Report suspected unauthorized access or vulnerabilities to hello@vetigen.com. Include the affected service, time, reproduction steps and, where possible, evidence without personal data. Do not access others’ data, modify records or disrupt the service. This channel is not prior authorization to test or a promise of a reward.

• Privacy Notice