Skip to content

Your numbers stay yours. And you know where they are.

Vyzor reads sensitive data: your books, your cash, your customers. Here is exactly where it lives, how it is protected and what the AI sees of it.

Join the beta Watch the demoQuestions? admin@vyzor.fr
  • Hosted in Paris
    Application and database in France.
  • Read-only
    No writes, no transfers possible.
  • AES-256 encryption
    Your access to connected software, encrypted.
  • Per-company isolation
    Enforced by the database itself.

Where your data lives. Piece by piece.

ApplicationVercelParis (France)
Database and accountsSupabase, on AWSParis (France)
Imported filesSupabaseVyzor project storage
AI assistantAnthropic (Claude)Data pseudonymized before sending

The full list of subprocessors (email delivery, PDF reading, connectors) and their countries: privacy policy

How we protect it. No jargon, no vague promises.

Encryption

  • All connections use HTTPS, with HSTS preloaded in browsers.
  • Access credentials for your software (tokens, keys) are encrypted with AES-256-GCM, using a key stored outside the database.
  • The connection between the application and the database is encrypted and its certificate verified.

Isolation between companies

  • Every piece of data is tied to a company.
  • The database itself enforces the separation (row-level security), and the application runs with a role that cannot bypass it.
  • Every request also checks that you are the company's business owner or a member of the accounting firm that handles it.

Access and audit trail

  • Authentication by email and password, or with your Google account.
  • Separate accounting firm and business owner workspaces: a firm only sees the client files entrusted to it.
  • Security events are logged and kept for 12 months; repeated attempts are rate-limited.

AI and your data

  • Calculations are done by a deterministic engine: the AI explains and presents, it does not calculate your numbers.
  • Before anything is sent to the AI, your company's name and the names of individuals are replaced with anonymous labels, then restored on display.
  • The AI only receives the indicators relevant to your question, never your raw ledger entries or data from another client file.

GDPR and data retention

  • Export your data and delete your account at any time, from the application.
  • Inactive accounts are deleted after 3 years; automatic purges enforce our retention periods.
  • Your numbers are never sold, shared or used to train models.

Read-only connections

  • The permissions requested from your software are limited to read access.
  • Cut off a connection in one click, from Vyzor or from your software: access stops immediately.

Your questions about security.

Can Vyzor change my books or make a transfer?

No. All access is read-only: Vyzor reads your data to analyze it; it does not write, change or delete anything in your software, and cannot trigger any payment.

Where is my data stored?

The application runs in Paris and the database is hosted in Paris. The full list of subprocessors and their countries is in our privacy policy.

Is my data used to train the AI?

No. Your numbers are never used to train models. Before being sent to the AI, your company's name and the names of individuals are replaced with anonymous labels.

Can another Vyzor customer see my numbers?

No. Every piece of data is tied to a company, and the database itself rejects any read outside your scope, on top of the checks performed by the application.

Does my accountant see what I do in Vyzor?

Only if you invite them. An accounting firm can only access the client files linked to it, and its working analyses stay separate from your business owner workspace.

How do I retrieve or delete my data?

From your account: export your data or delete your account at any time. Cutting off a connection from Vyzor or from your software stops access immediately.

A security question, or an IT security questionnaire?

We answer directly, with the technical detail you need.