Security & Data Handling

European buyers and their auditors rely on us to protect the chain-of-custody data that underpins EUDR due-diligence statements. The controls below summarise our baseline posture; a detailed security questionnaire is available on request.

Encryption

• TLS 1.2+ for all data in transit, HSTS enabled.
• At-rest encryption (AES-256) on managed database and object storage.

Access control

• Role-based access control with least-privilege defaults.
• Row-level security on multi-tenant tables — buyers see only their corridors.
• Single sign-on and MFA required for staff accounts.

Auditability

• Append-only audit log on traceability events (farmer registration, GPS capture, batch movement).
• Document hashes recorded for compliance exports.

Sub-processors

We use a short list of EU- or UK-hosted infrastructure providers for hosting, database, email, and error monitoring. A current list is available on request to security@vijanaprint.com.

Responsible disclosure

Report suspected vulnerabilities to security@vijanaprint.com. We aim to acknowledge within 2 business days.