Skip to main content
Security & privacy

Security you can trust

We take the security of your data seriously. Here is how we protect your information, your account, and the records you build with other companies.

How we protect your data

The measures that keep your data and your account secure.

Encryption

Your data is encrypted in transit and at rest using industry-standard protocols.

Access control & MFA

Permissions follow least privilege, and two-factor authentication is available on every account.

Tenant separation

Every organisation's data is strictly separated, so one company can never see another's private information.

Monitoring & logging

Account activity is logged and our systems are monitored, so unusual behaviour is detected and investigated.

Backups & availability

Your data is backed up regularly and runs on infrastructure built for high availability.

Secure development

We follow established secure-development practices, including the OWASP and ISO 27001 guidelines, and keep our software up to date.

Compliance & hosting

Our cloud providers are independently certified, and privacy is built into how we work.

Infrastructure & hosting

VEXORS runs on Amazon Web Services and MongoDB Atlas, which hold independent security certifications including SOC 2 Type II and ISO 27001. Our platform inherits their physical, network, and infrastructure controls.

Privacy & data protection

  • We collect only the data the platform needs to work.
  • As a UAE-registered company, we observe the UAE Personal Data Protection Law and follow GDPR principles.
  • We follow established security practices, including the OWASP and ISO 27001 guidelines.

Your data and your account

You stay in control, and your business records stay intact.

Close anytime

You can close your account from your settings whenever you choose.

Shared records are preserved

Closing your account deactivates it and signs out your team. Records shared with other companies (requests, bids, awards, and ratings) stay intact, and we keep what we are legally required to keep.

Personal data on request

Need specific personal data removed? Contact us and we will handle it in line with GDPR and the UAE PDPL.

Responsible disclosure

Found a security issue? Email security@vexors.com. We review every report, keep you informed, and credit researchers who report responsibly with their consent.