Security

1. Our approach

We use layered controls across infrastructure, application design, and operational process. Security requirements are considered when we plan features, review code, and respond to incidents.

2. Data in transit and at rest

Connections to VitaMotions are protected with modern encryption in transit. Stored customer data, including uploaded videos and assessment outputs, is protected using industry-standard safeguards appropriate to the sensitivity of the service.

3. Access control

Platform access is authenticated and permission-based. Customers can assign roles so that only authorised people can view, edit, or export assessment material. Internal access to production systems is limited, logged, and granted on a need-to-know basis.

4. Secure development

We maintain development practices intended to reduce risk in production releases, including dependency monitoring, change review, and environment separation. Security issues reported to us are triaged and addressed based on severity.

5. Infrastructure and vendors

VitaMotions runs on reputable cloud infrastructure and works with service providers that support hosting, monitoring, email delivery, and related operations. Vendors that process customer data are expected to meet appropriate confidentiality and security obligations.

6. Backups and resilience

We maintain backup and recovery practices designed to protect against data loss and support service continuity. Recovery procedures are tested as part of our operational readiness.

7. Customer responsibilities

Security is shared. Customer organisations should:

• use strong, unique passwords and enable available authentication controls;
• remove access promptly when staff change roles or leave;
• obtain required consent before recording individuals;
• apply internal policies that govern how assessment data is shared or retained;
• report suspected misuse or unauthorised access to us without delay.

8. Incident response

If we become aware of a security incident affecting customer data, we investigate promptly and take steps to contain impact. Where required by law or contract, we will notify affected customers and support reasonable follow-up actions.

9. Privacy and compliance

Security and privacy work together. For details on how personal information is handled, see our Privacy Policy.

10. Report a concern

If you believe you have found a vulnerability or have a security question, contact hello@vitamotions.com with enough detail for us to investigate. Please avoid public disclosure until we have had a reasonable opportunity to review the report.