Security and trust
What we will and will not claim about security
How this website handles your information
We do not ask for sensitive payroll data
The quote form collects contact and business details only. There is no field for Social Security numbers, tax IDs, bank details, payroll registers or tax forms, and the form actively rejects submissions that appear to contain them.
Form data is validated on the server
Validation happens server-side, not only in your browser, and submissions are transmitted over HTTPS.
Your form details never reach analytics
Analytics events carry the page and the button pressed. Names, emails, phone numbers, comments and business details are structurally excluded from them.
Nothing sensitive goes in the URL
Form submissions are posted, not passed through query strings, so your details do not end up in browser history or server access logs.
We do not fake a login
There is no login form on this marketing site. If a client portal link appears, it points at the real portal and nowhere else.
Failures are reported honestly
If a quote submission fails to reach us, you are told so and given a correlation ID and another way to contact us — rather than shown a confirmation for a message that went nowhere.
Controls we will publish once they are documented
Access controls, multi-factor authentication, secure document exchange, audit logging, vendor management and business continuity all belong on this page. They will appear here when each one is implemented and documented — described as what we actually operate, not as a list of intentions.
In the meantime, ask us directly. A provider who cannot answer a security question in specifics is telling you something.
About certifications
Payroll runs on infrastructure from cloud providers, payroll platforms and banks, and those organisations hold their own security certifications. Those certifications belong to them.
We are not going to display a vendor’s certification on our site as though we held it, and we will not describe ourselves with terms like “bank-grade” or “military-grade”, which sound precise and mean nothing. If VEA itself holds a current report or certification, it will be named here specifically, with its scope and date.
Reporting a security issue
If you believe you have found a security issue affecting this website or our service, please tell us through our contact page. Please do not include payroll data, credentials or personal information in your initial report.
Talk to the people who would run your payroll.
Tell us how you pay people today. We come back with a quote, a clear scope and a switching plan.