Last updated: June 9, 2026
At Vanigaa, we understand that your business data is your most valuable asset. Whether it's your sales history, inventory counts, or customer details, we treat your data with the highest level of security and respect. This page outlines the practices we use to keep your information safe.
1. Infrastructure Security
Vanigaa is hosted on world-class, highly secure cloud infrastructure providers (such as Amazon Web Services / Google Cloud). Our infrastructure is designed to be highly available, fault-tolerant, and secure against physical and digital intrusions.
- Physical Security: Our cloud providers maintain strict physical security protocols at their data centers, including biometric access controls, 24/7 security guards, and extensive surveillance.
- Network Security: Our networks are protected by enterprise-grade firewalls, DDoS mitigation services, and continuous network monitoring to block malicious traffic before it reaches our servers.
2. Data Encryption
We use state-of-the-art encryption to protect your data both when it is stored and when it is traveling across the internet.
- In Transit: All communications between your browser or mobile device and our servers are encrypted using Transport Layer Security (TLS/SSL) with strong cipher suites. This ensures that your data cannot be intercepted or tampered with.
- At Rest: All sensitive data stored in our databases, including passwords and billing information, is encrypted at rest using industry-standard AES-256 encryption.
3. Application Security
We integrate security into every stage of our software development lifecycle.
- Authentication: We use secure, token-based authentication mechanisms. Passwords are never stored in plain text; they are hashed using bcrypt with unique salts.
- Role-Based Access Control (RBAC): Vanigaa allows you to set granular permissions for your staff members, ensuring that cashiers, managers, and admins only have access to the data they need.
- Regular Audits: Our codebase undergoes regular automated vulnerability scanning and manual code reviews to identify and patch potential security flaws.
4. Data Backup and Reliability
We know that you rely on Vanigaa to run your business continuously.
- Automated Backups: Your database is backed up automatically multiple times a day. Backups are encrypted and stored in geographically redundant locations to ensure disaster recovery.
- Uptime Commitment: Our systems are designed for high availability, targeting a 99.9% uptime SLA so your POS is always ready when you have a customer waiting.
5. Payment Security
Vanigaa does not directly store, process, or transmit your customers' full credit card numbers. All electronic payments are processed by PCI-DSS compliant third-party payment gateways. We only receive secure tokens that represent the transaction.
6. Incident Response
In the unlikely event of a data breach or security incident, we have a comprehensive incident response plan in place. We will promptly notify affected users and applicable regulatory authorities in accordance with our legal obligations.
7. Report a Vulnerability
If you are a security researcher and believe you have found a vulnerability in Vanigaa, we encourage you to disclose it to us privately. Please email security@getvanigaa.com with details of the vulnerability, and we will work with you to resolve it promptly.