Trust Center

Shreeji Vedaa (VEDAA) is an AI knowledge partner for Microsoft Dynamics 365, SAP, Power Platform, Azure and Business Central, built by Microsoft and SAP certified consultants. The questions you bring to Vedaa often touch real business systems, so we treat the trust you place in us as the foundation of the product, not an afterthought.

This page explains, in plain language, how we secure your information, how your conversations are used, where your data is stored, and the rights you keep over it. We aim to claim only what we genuinely do today see “Certifications” below for an honest status of what is in place and what is on the roadmap.

The heart of our promise is simple: your conversations and information are yours alone. Shreeji Vedaa is built so that one customer's data can never be seen, searched, or reached by another customer — and so that your private information is never leaked, sold, or exposed to anyone outside the people you allow.

• ✓Owner-only access, enforced on every request. Access is authorised against the owning account on each API call, before any content is decrypted. A non-owner is refused outright — there is no cross-account read, search, or listing.
• ✓Messages cryptographically bound to you. Conversation content is protected at rest with owner-bound, per-conversation AES-256-GCM encryption — the key is derived from your account and that specific conversation. So your messages are tied to you even at the storage layer and cannot be read across accounts.
• ✓Never sold, never leaked. We never sell your data and never use it for advertising. It is shared only with the vetted providers that run the service (each bound by strict data-protection terms) and, where you explicitly consent, the consultant helping you — nobody else.
• ✓Never used to train public AI. Your questions are processed only to generate your answer. They are not used to train public AI models.
• ✓You can erase it, anytime. Delete any conversation yourself, or ask us to remove your entire account and all its data.

Every layer of Shreeji Vedaa is built to keep your business information safe in transit, at rest, and in use.

• ✓Encryption in transit. All traffic between your browser and our services is protected with industry-standard TLS/HTTPS.
• ✓Encryption at rest. Conversations and account data live in a managed, encrypted PostgreSQL database; uploaded files are kept in private cloud storage encrypted by default.
• ✓Trusted cloud infrastructure. The platform runs on enterprise-grade cloud providers that maintain SOC 2, ISO 27001 and GDPR-aligned controls for the data centres that host your data.
• ✓Network isolation. Application services run inside private cloud networks; your data is never exposed directly to the public internet beyond the API your app talks to.
• ✓Secret management. Keys and credentials are held in secured environment configuration, never committed to source code.

Access is controlled end to end, from how you sign in to who inside Shreeji can reach your data.

• ✓Token-based sign-in. Sessions are protected with signed, expiring JSON Web Tokens short-lived access tokens plus rotating refresh tokens scoped to your account.
• ✓Separation of duties. Customer and administrator areas are isolated, with separate credentials and token scopes, so an admin session can never act as a customer, or the reverse.
• ✓Role-based permissions. Inside the admin console, each team member sees only the modules their role grants billing, consultations, content and configuration are gated individually.
• ✓Encrypted integration secrets. Credentials for the services Vedaa connects to are encrypted before storage and are never shown again in plain text after entry.
• ✓Audit logging & usage limits. Access to a conversation is logged, and per-account token quotas guard against abuse and runaway usage.

Vedaa's answers come from an AI engine working alongside certified consultants. We are deliberately transparent about who can see your conversations, because it matters most.

• ✓Consent first. Conversation review is something you opt into at sign-up it is never hidden.
• ✓Processed, not mined. Your questions are processed by Vedaa's AI engine to generate a response, and are not used to train public AI models.
• ✓Least access. A consultant opens a conversation only when genuinely helping that customer, and every access is logged.
• ✓You stay in control. You can delete any conversation yourself at any time, and opt out of human review where consultation isn't required.

Vedaa is a powerful assistant, but it is a guide not a replacement for professional judgement on your live systems.

• ✓Verify before acting. AI answers can contain errors. Always confirm critical steps especially financial postings, security roles or configuration changes before applying them in your production environment.
• ✓Human escalation, one click away. For high-stakes work, escalate from the conversation to a certified Microsoft / SAP consultant without losing context.
• ✓Guidance, not certified advice. Vedaa provides implementation guidance, not certified legal, financial or audit advice.

Consultations and subscriptions are paid through a dedicated payment provider we never see or store your full card details.

• ✓Processed by Razorpay. Card, UPI and netbanking details are captured and processed by Razorpay on their PCI-DSS compliant systems. Shreeji Vedaa never stores card numbers.
• ✓Verified transactions. Every payment is verified server-side against the provider's signature before access is granted, so a forged confirmation can't unlock a paid feature.
• ✓Minimal billing records. We keep only what we need for receipts, tax and support the payment reference, amount and status not your financial instrument.

You stay in control of your information at all times.

• ✓Access & portability. Request a copy of the data we hold about you.
• ✓Deletion. Delete individual conversations yourself, or ask us to remove your entire account and associated data.
• ✓Correction. Update inaccurate profile or account information.
• ✓Retention limits. We keep conversations and records only as long as needed for the service and any legal obligations, then remove them on a defined schedule.
• ✓Consent withdrawal. Withdraw consent for expert conversation review where consultation isn't required.

Shreeji Vedaa runs on enterprise-grade cloud infrastructure, with production data hosted in the EU (Ireland) region. We are clear about the trusted providers that help us run the service each is a sub-processor bound by strict data-protection terms, and we share only the data each one needs to do its job.

Shreeji Vedaa is designed to respect data-protection laws in every market we serve.

We believe in claiming only what we hold. Here is exactly where we stand today and what is coming.

We maintain a breach-response process. In the unlikely event of a data incident, we will investigate promptly and notify affected users and regulators within the timelines required by applicable law (such as DPDP and GDPR). For data-protection requests, a Data Processing Agreement (DPA), or any security question, our team is here to help reach the Shreeji security team at security@shreejivedaa.com.