Security
Last updated: June 10, 2026
1. The shape of it
virtual24 is built around one structural decision: each customer runs on their own dedicated server. This page describes, plainly, how the platform is built today. It claims nothing it cannot show.
2. Your own server, your own database
There is no shared tenancy. Your satellite is a dedicated machine provisioned for you alone, with its own database on that machine. Your data is not a row next to someone else's row; it is a server with your name on it. Isolation is not a configuration setting that could be misconfigured between customers; it is the architecture.
3. Credentials
The credentials you give your agents - logins, API keys, connector tokens - are stored in an encrypted vault on your own server, not in a central pool. You bring your own AI subscription or API key, so access to your model account stays in your name, under your provider's controls, with no intermediary account in between.
4. Provisioning
The secrets used to stand up and enroll a new satellite are single-use, stored hashed at rest, and expire. A captured provisioning token cannot be replayed, cannot be read back from the database, and goes stale on its own.
5. Access control
Access is role-scoped: owners and members see and do different things, and customers see only their own organization. Every action re-checks authorization server-side, in the query itself; nothing relies on the interface to hide a button. A forged request against someone else's resource finds nothing.
6. In transit
All traffic to this site, to the control plane and to your satellite travels over TLS. Responses carry strict security headers. Form submissions are encrypted in transit.
7. This website
This marketing site sets no cookies and runs no trackers or analytics. What we collect and why is described in the privacy policy; it is one short form and standard server logs.
8. What we do not claim
We do not currently hold formal certifications such as SOC 2 or ISO 27001, we publish no uptime figures, and we have not commissioned an external penetration test. When any of that exists, it will appear here. Until then we would rather describe the architecture than borrow a badge.
9. Reporting
If you believe you have found a security issue, tell us at support@virtual24.ai. Reports go to the people who can act on them.