How we keep your data safe
SOC 2 Type 1 Compliant
GDPR Aligned
CCPA Compliant
CASA Tier 3 Certified
All credentials encrypted at rest and in transitNo sensitive data stored on local machines. Ever.OAuth-based authentication for all integrationsIsolated execution environments for every workspaceApproval system for sensitive actionsYour data is never used to train modelsYou stay in control
You approve every action
Viktor drafts messages, creates reports, and writes code. You're always in the loop. Sensitive actions require your explicit approval before anything runs. Whether you're in Slack or Microsoft Teams (soon), you stay in control.
Your credentials are stored securely in the cloud
All API keys, OAuth tokens, and integration credentials are encrypted and stored in secure cloud infrastructure. They never touch a local machine.
Your data never trains AI models
Your conversations, files, and business data are never used to train third-party models. Your workspace is yours, across Slack, Microsoft Teams (soon), and the standalone app.
How we build Viktor
Full
Compliance
SOC 2 compliant, GDPR aligned, CCPA compliant, CASA Tier 3 certified. We encrypt data at rest and in transit, enforce strict access controls, maintain incident response plans, and monitor compliance continuously.
Isolated
Execution
Every task Viktor runs executes in a sandboxed environment with no cross-tenant data access. Your workspace, integrations, and memory are completely isolated from every other customer.
Principle of
Least Privilege
Viktor only requests the permissions it needs. Each integration uses scoped OAuth tokens with minimal access. Internal systems follow strict role-based access control, and customer data access is limited to what's necessary to complete your requests.
How Viktor handles your data
Encryption
All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Credentials and secrets are stored in dedicated vaults, separate from application data.
Authentication & Access
Viktor authenticates through OAuth 2.0 with your Slack workspace or Microsoft Teams (soon) tenant. Admin controls let you manage who on your team can interact with Viktor and which integrations are enabled.
Data Retention
You control your data. Conversation logs, skill memory, and generated files can be reviewed and deleted at any time. We don't retain customer data beyond what's needed to deliver the service.
Third-Party Integrations
Viktor connects to 20+ services: Google Ads, HubSpot, Stripe, and more. Every integration uses OAuth-based authentication with the narrowest permission scopes possible. No passwords are stored in plain text.
Infrastructure
Viktor runs on cloud infrastructure with 24/7 monitoring, automated threat detection, and regular penetration testing. Our systems are built for high availability.
Need more details?
We'll walk you through our security setup, share compliance docs, or answer your security team's questions. Just reach out.
