Posture at a glance
We follow SOC 2 Type II readiness practices across all five Trust Services Criteria. Internal controls are documented, evidenced, and reviewed annually. We're a small operation — that's why we lean on infrastructure providers (Vercel, Neon, Stripe) that themselves carry SOC 2 / ISO certifications.
99.9%
Uptime target (Tier 1)
72h
Breach notification
30d
DSAR SLA
7yr
Financial retention
12
Security policies
0
Sold data points
CC · A · C · PI · P
Security
Active controls, encryption, MFA, audit logging, vulnerability management, responsible disclosure.
P · GDPR · CCPA
Privacy Notice
What we collect, why, who else sees it, how long we keep it, your rights.
Legal
Terms of Service
The agreement governing use of the Service.
CC9 · Vendors
Subprocessors
Every external service that processes data on our behalf, with DPAs and SOC 2 references.
A1 · Availability
System Status
Live uptime, recent incidents, scheduled maintenance.
CC7 · Disclosure
Report a Vulnerability
Found something? Email security@valuetovictory.com — 72h acknowledgment.
P · DSAR
Privacy Request
Access · correct · export · delete your data. 30-day SLA for fulfillment.
CC · Audit
Auditor Documents
Auditors and enterprise prospects — request our control matrix and policy stack.