Security

Vireo treats security as part of how each product is built. We use layered controls so that a screen hiding a button is never the only thing protecting an action or record.

Vireo ID uses a sign-in link sent to your email or a code sent to your phone rather than a reusable Vireo password. Sessions and device access can be revoked. Roles that carry responsibility may require a confirmed phone number or additional verification.

Network traffic uses encrypted connections. Database permissions and product boundaries restrict who can read or change a record. Sensitive actions are performed through controlled server or database operations, and important support or account events are logged.

We choose service providers needed to host, deliver, monitor, and support Vireo. Access to production information is limited to authorised people and systems with a work-related need.

Keep your email and phone accounts secure, use a device lock, install product and operating-system updates, and do not share sign-in links or one-time codes. Contact us promptly if a device is lost or you notice activity you do not recognise.

Send suspected vulnerabilities or account-security concerns to contact@vireo.bz with “Security” in the subject. Include enough detail for us to reproduce the issue, but do not access, copy, change, or publish another person’s data. We will acknowledge and investigate good-faith reports as quickly as practical.

No online service can guarantee that an incident will never happen. If a security incident affects personal information, we will investigate, contain it, and notify affected people or authorities when required.