Security & Compliance
How Vedika protects your data, meets compliance requirements, and ensures enterprise-grade security for astrology API integrations.
Infrastructure Security
Vedika runs on managed cloud infrastructure in India (Mumbai).
- Residency options: Account records are stored in India (Mumbai). Chat context and query text may be processed outside India. Regional processing and backup requirements must be reviewed and recorded in a signed order form.
- TLS 1.3: All API traffic encrypted in transit — HTTPS enforced, no HTTP fallback
- DDoS protection: Web application firewall plus rate limiting at multiple layers
- Auto-scaling: Auto-scaling with continuous health checks
- Automated backups: Database backups with point-in-time recovery
Data Handling & Privacy
Stored chat data: We store chats, including questions, answers and birth details supplied in the conversation. Chats are kept, including for future training. Active conversations expire after 24 hours by default, or seven days when created through an enterprise API key. Conversation settings can extend that lifetime. Expiry ends active chat access; it does not mean the stored data is deleted.
- Chat data storage: Chats can include the birth details supplied for a reading.
- Conversation history: Stored for conversation context, including for future training. Active chat expiry is separate from deletion.
- No third-party sharing: Birth data is never shared with external services or partners
- Data deletion: Request deletion through support; retention requirements are reviewed for the relevant records.
- Minimal PII: Only email and payment info stored — no names, addresses, or government IDs required
Authentication & Access Control
- API key authentication: Unique keys per client with prefix-based identification (
vk_live_*) - Per-key rate limits: Configurable per API key, per endpoint, and per time window
- IP allowlisting: Enterprise clients can restrict API access to specific IP ranges
- Key rotation: Revoke and regenerate API keys instantly via dashboard
- Audit logging: Every API call logged with timestamp, endpoint, response code, and billing status
GDPR Readiness
| GDPR Requirement | Vedika Implementation |
|---|---|
| Right to Access (Art. 15) | Export all account data via dashboard or API |
| Right to Erasure (Art. 17) | Deletion requests reviewed against applicable retention requirements |
| Data Minimization (Art. 5) | Chats and supplied birth details are stored |
| Purpose Limitation (Art. 5) | Chats are kept, including for future training |
| Data Processing Agreement | Available for enterprise clients on request |
| Breach Notification (Art. 33) | 72-hour notification commitment |
Enterprise Security Features
Additional security controls available on Enterprise plans ($240/month):
- IP allowlisting: Restrict API access to your infrastructure IPs only
- Custom rate limits: Tailored rate limits per endpoint based on your usage patterns
- Dedicated support: Direct Slack/email channel with engineering team
- Audit logs: Detailed API usage logs exportable via admin dashboard
- White-label: Remove all Vedika branding from AI responses
- Contracted SLA: Uptime and support terms for enterprise plans are agreed in a signed order form. Live service status: vedika.io/status
Responsible AI
Vedika's AI astrologer includes safety guardrails that go beyond standard API practices:
- Crisis detection: Suicide/self-harm mentions trigger immediate helpline information — no astrology attempted
- Medical/legal/financial guardrails: AI discusses astrological indicators but always redirects to qualified professionals
- Precision-verified data: Proprietary validation engine ensures every astrological fact is mathematically computed, never AI-generated
- No fabricated predictions: All planetary positions, yogas, and aspects verified against XALEN Ephemeris astronomical data
- code-computed, source-grounded accuracy: Validated against classical texts (BPHS, Phaladeepika, Saravali)
Questions About Security?
Our team is available to discuss compliance requirements, provide security documentation, or arrange a security review.
Contact Security Team Privacy Policy Terms of Service