01 · Approval
Nothing sends until you say so.
Ve drafts. You send. Replies wait in your drafts and outreach waits in an approval queue. No email leaves your outbox without your explicit approval, and you can see and delete everything Ve holds.
Trust · Ve
How we protect
what is yours.
A model of you is the most personal data we will ever hold. The posture below describes, without flourish, how we protect it and what we will never do with it.
Four principles
The shape of the posture.
02 · Encryption
Encrypted everywhere.
AES-256 encryption for your data at rest and in flight. Every connection uses TLS 1.2 or newer. There is no unencrypted path to your data.
03 · Isolation
One workspace, one boundary.
Every record is scoped to your workspace, and every query carries that scope. There is no shared model across customers: what Ve learns about you belongs to your workspace alone.
04 · Operations
Watched and backed up.
Round-the-clock monitoring and alerting across the platform. Encrypted backups run twice a day, with point-in-time restore covering the hours between them.
Compliance
Where we stand today.
SOC 2Type II in progress
CASAAssessed
AES-256At rest + in flight
Approval boundary
Ve drafts. You send.
Ve reads your mail to draft replies and prepare outreach, and that is where its authority ends. Drafts land in your drafts folder. Outreach lands in an approval queue. Nothing reaches a recipient until you approve it.
You can also see what Ve knows. Open your workspace and review the model Ve has built of you, then delete any part of it, or all of it.
Your data and our models
Your mail never trains our models.
Ve does not use your mail to train its models. There is no shared model learning across customers, so nothing your workspace teaches Ve can ever surface for anyone else.
The model of you that makes Ve useful is built inside your workspace, stays inside it, and is deleted with it.
Backups
Backed up twice a day.
Encrypted backups run twice a day, and point-in-time restore covers the hours between them. If something goes wrong we can bring your workspace back to a specific moment.
Round-the-clock monitoring and alerting covers the rest. When something degrades, we hear about it immediately.
Where your data lives
Hosted in the United States.
All production data and compute is hosted in the United States, and your data does not leave it.
There is one copy of the truth for every workspace. Your data is not replicated to other regions and does not move without a deliberate decision you would know about.
Common questions
Asked on every security review.
Does Ve train on my data?
No. Your mail is never used to train Ve’s models. The model Ve builds of you lives inside your workspace and is used only there.
Does Ve send email on its own?
No. Ve drafts replies and prepares outreach, and everything waits for your approval. Nothing leaves your outbox until you send it.
Where is my data stored?
In the United States. All production data and compute is hosted there, and your data does not leave it.
Is my workspace isolated from other customers?
Yes. Every record is scoped to your workspace and every query carries that scope. There is no shared model across customers.
How do I get a DPA or a security questionnaire?
Email security@ve.ai. We handle vendor questionnaires, DPAs, BAAs, and sub-processor lists on request, and a human replies within two working days.
How do I report a vulnerability?
Email security@ve.ai with the subject prefix [disclosure]. A human reads every report.
Security questions
Vendor questionnaires, DPA, BAA, and our sub-processor list are available on request. Email security@ve.ai and a human will reply within two working days. Vulnerability reports go to the same address with the subject prefix [disclosure].