Security and trust, built in from day one
Client data is handled to industry best practice: encryption in transit and at rest, role-based access control, and a complete audit log of every action.
Engineered for the sensitivity of AML data
Security is engineered into the platform, from encryption and data residency in Sweden to per-user access control and a complete audit trail of every action.
Encryption everywhere
Client data is encrypted in transit and at rest, with continuous rolling back-ups and documented security practices.
Hosted in Sweden, GDPR-first
All data is stored and processed in Sweden. Our processing practices, retention rules and subprocessor list are built around GDPR.
SSO, 2FA and roles
Single sign-on and two-factor authentication for every user, with role-based access so each person sees only the clients and cases they should.
Audit logging
A detailed record of user actions, data changes and access attempts, the transparency your quality team and supervisor expect.
Security FAQ
Where is my data hosted?
Vidd runs on cloud infrastructure in Sweden. Client data is stored in Swedish data centres, is encrypted in transit and at rest, and is covered by continuous rolling back-ups.
How do you handle GDPR and subprocessors?
We act as a processor of your client data under a data processing agreement. We keep a current list of subprocessors, notify you of changes, and support data-subject requests and retention rules aligned with your AML record-keeping obligations.
Can access be restricted per user?
Yes. Role-based access control lets you decide which clients, cases and reports each user can see and edit, and SSO and 2FA are available for every account.
Is everything auditable?
Every user action, data modification and access attempt is logged, giving you a complete audit trail for internal quality control and supervisory inspections.
How do I report a security issue?
Vulnerabilities can be reported responsibly to us. If you believe you have found one, contact us at support@vidd.se and we will acknowledge, investigate and keep you informed.
Do you have documentation for procurement?
Yes. Our security documentation and data processing agreement (DPA) are available for your security and procurement review, covering our controls, subprocessors and disclosure process. Request them via the contact page.