In practice · SECURITY & GOVERNANCE

Security you can hand to your team.

Trusted by 15 of the top 25 CPA firms. And 5 of the largest banks in the world.

Validis is audited, certified, and contractually covered. Visit our Trust Center to see our security documents and policies.

What that means in practice

Six things your security team will check.

Each one answered the same way directly in the contract, and with documentation available on request.

Field-level scope. Only the financial data your workflow needs, never personal data beyond billing names.
Multi-tenant isolated. Each customer’s data is fully separated, with a per-action audit trail.
Encrypted at rest and in transit. AES-256, TLS 1.3, managed key infrastructure.
Hosted in the region you select. Azure data centres in your location: UK, US, AUS, and others on request.
Never used to train external AI models.
Audit-logged at every step. Full traceability from sign-in to data export.

The paperwork

Audited, certified, and contractually covered.

The headline answers are below. The full pack of reports, certificates, sub-processor list, DPA, can be found in our Trust Centre.

SOC 2 Type II

Annual independent audit of security, availability, and confidentiality controls.

See in Trust Centre

ISO 27001

Certified information security management system.

GDPR

Standard DPA. Data subject rights supported. EU representative appointed.

Regional residency

We use Azure data centres in your location. Today that includes the US and EU, with additional regions available on request. Location follows the customer.

AI governance

Per-call audit log on AI tool access. No customer data used to train external models — written into the contract.

MSA & NDA

Mutual NDA in every contract. Clear processor obligations, liability allocation, and breach-notification terms.

Visit our Trust Centre

Proof & credibility

“With Validis we can validate the accuracy of sales activity and empower banks to use it across a range of activities. By partnering with Validis, we believe we are not only setting the pace, but mapping out the road ahead too.”