Domain split
Public marketing stays on testvoy.com. Auth, dashboard, billing and checkout stay on app.testvoy.com.
Security
Security-first posture without unsupported certification claims.
Use this page to explain current controls, pilot readiness and Enterprise review paths without claiming certifications that are not complete.
Payment handling
Payments are handled by iyzico; Testvoy should not store raw card data.
Report governance
Shareable reports should support expiry, revocation and protected sharing as the product matures.
Experiment quality
SRM checks, bot filtering, QA readiness and audit history protect teams from shipping on weak evidence.
Enterprise review
SAML/OIDC, SCIM, IP allowlist, custom bot rules and DPA requirements are handled through sales-assisted review.
No unsupported claims
Do not claim SOC 2, uptime guarantees or production scale proof until they are actually complete and documented.