Security and administration

Access controls

• ✓Role-based access controls for workspace administration and team workflows.
• ✓Multi-factor authentication support for account protection.
• ✓Single sign-on over OpenID Connect (Okta, Microsoft Entra ID, Google Workspace or any OIDC provider) with verified email domains, just-in-time provisioning and enforce-SSO, on the Enterprise plan. SAML and SCIM are not supported today.
• ✓Workspace audit log of administrative and record changes (Growth plan and above), plus a free read-only viewer role for stakeholders who only need visibility.

Data protection

Compliance posture

Vesso follows practical secure development practices for B2B GTM teams, including encryption in transit, role-based access, and audit-friendly operational workflows. As an early-stage company we haven't yet completed formal certifications like SOC 2. We're happy to walk through our current security posture and roadmap, so contact us anytime.

Your data stays yours

• ✓Your workspace data is stored in AWS-managed services (DynamoDB and S3), which encrypt data at rest by default.
• ✓Connections between your browser and Vesso use TLS in transit.
• ✓Workspace admins can export CRM records, deals, meetings, notes, chat and more as CSV and JSON at any time from Admin Settings → Export Data, no support ticket needed. To delete your workspace data, contact hello@vesso.ai.
• ✓Calendar integration scopes are limited to read access, and OAuth tokens for every connected integration are encrypted at the application level before they are stored.