Security&Compliance

The platform is hosted in Canada, with protected dashboard access, API request controls, and privacy practices for enterprise buyers to review.

Security practices

Proven controls that exist in the current production platform.

Canadian hosting

Vynn.AI runs on DigitalOcean infrastructure in Canada. The production application and managed PostgreSQL database are both hosted in Canada.

Dashboard sign-in

Customers sign in to the dashboard through Clerk. Access checks protect the dashboard and onboarding pages, and organization membership determines which team a customer can access.

API access

When API key authentication is enabled, backend routes require a key. The website keeps backend credentials on the server rather than exposing them in the browser. API credentials are managed separately for each organization.

Request limits

Browser requests to the backend are restricted to approved websites through CORS settings. The backend also supports limits on the number of requests in a rolling time window. Response headers let clients detect and respect those limits.

Traceability

The backend gives each request an X-Request-ID or keeps the one supplied with the request. That ID appears in logs and error responses, so operators can trace a request when investigating errors or reports of outdated data.

Collection monitoring

Automated health checks monitor when prices were last collected across 5 Canadian time zones. Zones are flagged as stale after 36 hours without fresh data, and providers after 48 hours. The health API reports when service is degraded instead of hiding it.

Compliance context

Privacy and procurement context for enterprise buyers.

PIPEDA alignment

Vynn.AI operates as a Canadian B2B grocery pricing platform and aligns its privacy practices with PIPEDA. Our public privacy commitments are documented on the privacy page.

Data scope

The dataset is built around product, retailer, region, price, and promotion fields. It is not consumer purchase-history data, payment data, or loyalty-program data.

Data minimization

The product focuses on the data needed for price analysis and reporting: current price, base price, promotion details, location, and how recent each price is. It is designed to label or leave out unknown or unverified price records, rather than guess.

Procurement review

Enterprise buyers who need security review materials or a vendor questionnaire can contact Vynn.AI through the contact page or by emailing [email protected].

Need a security review?

If your team needs procurement answers, a questionnaire review, or a data-residency discussion, contact us directly.

Questions about our security practices?

Contact us for a procurement review, vendor questionnaire, or data-residency discussion.