Security policy
The Vevi Dental team understands the importance of the security of your data and that of your clients. That is why, from the very beginning, we have opted for a cloud-based platform. You no longer have to worry about keeping your computer virus-free, daily updating your system and applications to patch security problems, backing up your data, etc. Instead, our team of experts takes care of these and many other tasks that must be performed daily to ensure the security of your data. Once you start using Vevi Dental, your only concern will be remembering your password ;-)
ISO 27001 Certified Company
Vevi Systems S.L. has an information security management system certified according to the ISO/IEC 27001:2013 standard by Applus+.
You can download here the accreditation certificate.
Secure Platform
- Vevi Dental is a product developed by security-expert programmers, who from the very beginning have taken into account the common problems of this type of platform.
- Unlike other products, all personnel involved in the development of Vevi Dental are computer engineers with years of experience in software development and application and system security.
- We periodically audit the security of our platform and keep all its components updated at all times, avoiding the presence of known security flaws.
- Our role-based access control system also allows you to manage which of your employees or clients have access to your data and under what conditions.
Secure Access
- Access to our platform requires user authentication via password. We follow widely accepted procedures for secure password management and storage, user session management, and brute-force attack prevention.
- Our staff never accesses your data unless you request it or it is strictly necessary to ensure the service.
- Thanks to the use of HTTPS, all information you upload or consult on the platform travels fully encrypted over the Internet, safe from manipulation or theft. We use the most current security algorithms and practices to protect your communication with our platform.
Your Data is Safe
- Vevi Dental is hosted on the Amazon Web Services platform, the leading Cloud provider today.
- The security of such a hosting environment is much greater than that of a standard hosting provider, or generally what you can maintain in your own facilities.
- Amazon AWS data centers follow strict security practices and have numerous prestigious certifications that prove it, such as ISO 27001, PCI (Payment Card Industry) or DSS (Data Security Standard), among others. If you are interested in learning more details about how Amazon manages the security of its data centers, you just have to visit the information they themselves have available: http://aws.amazon.com/es/security/.
- We back up your data every hour, so you never lose the information you need. We store copies redundantly, and transmit and store them encrypted so that only duly authorized Vevi Dental personnel can access them when necessary.
- Both Vevi Dental and the AWS platform comply with the General Data Protection Regulation (GDPR), which ensures the correct processing of your data by our systems and employees, in accordance with current legislation in the European Union, facilitating compliance with said regulations in your company.
Your data is yours
- We have a strong commitment to the privacy of your data. We don't give to anyone the data that you upload to the platform, nor do we use them for any purpose other than the actual operation of Vevi Dental.
- You can have your data at any time through the platform. And if you wish, we provide them in a more comfortable format so you can save them or take them whenever you want.
- All your data is hosted on servers located in the European Union (Amazon currently maintains their servers in Ireland), your privacy being guaranteed by european Regulation (EU) 2016/679 of April 27, 2016, General Data Protection Regulation (GDPR), in line with the recommendations of the Spanish Agency for Data Protection (AEPD) in relation to the contracting of services in the cloud.
- You can delete or edit your data at any time from the platform itself. And you can contact with us if you want to recover some data that you have erased by mistake, or if you want us to delete your backup data.
Responsible Incident Management
- Despite all the efforts we make every day to avoid it, we are aware that sooner or later accidental or intentional incidents may occur, and we are prepared to respond to them.
- We carry out responsible incident management, informing our clients of all those that may affect our service or their data, and indicating the nature of the incidents, the measures taken to resolve them, the estimated resolution time and, if they occur, the damages caused.
- We maintain a contingency plan to respond as quickly as possible to incidents that may occur, minimizing their impact on the service.
And also, if you want to know more about our security policy, or ask us any questions or concerns, you just have to contact us.