Security

Security without vague promises.

Vespper handles document workflows that may be sensitive. This page states what is available today, what is an enterprise option, and what is still in progress.

Current status

Vespper's SOC 2 program is in progress. We do not describe the service as SOC 2 compliant before that work is complete.

Security documentation and available evidence can be reviewed through the Vespper security portal.

Enterprise controls

Enterprise plans can include zero-data-retention deployment, self-hosting, custom usage limits, onboarding support, and uptime commitments. These controls are scoped and documented with each customer rather than implied for every plan.

Review the current plan comparison or contact the founders to discuss deployment requirements.

Responsible disclosure

If you believe you found a security issue, email founders@vespper.com with a description, reproduction steps, and potential impact. Please avoid accessing, modifying, or retaining other users' data.

Questions and procurement

For architecture, retention, hosting, or procurement questions, contact Vespper. We will answer with the controls and documentation that apply to your proposed deployment.