Security

Security-first posture grounded in current controls.

This page explains Testvoy's security controls, data-protection approach and enterprise review paths.

Domain split

Public marketing stays on testvoy.com. Auth, dashboard, billing and checkout stay on app.testvoy.com.

Payment handling

Payments are handled on the contracted payment provider's secure form; Testvoy does not store raw card data.

Report governance

Shareable reports should support expiry, revocation and protected sharing as the product matures.

Experiment quality

SRM checks, bot filtering, QA readiness and audit history protect teams from shipping on weak evidence.

Enterprise review

SAML/OIDC, SCIM, IP allowlist, custom bot rules and DPA requirements are handled through sales-assisted review.

Verifiable security statements

Testvoy states only published and verifiable security controls; it does not claim SOC 2 certification or an unwritten uptime guarantee.