Security

Kept in region. Kept apart. Kept on record.

Vyuha is built for organisations that are answerable for how they handle information. Public sources only, tenant isolation, encryption, in-country residency and an audit trail on every action.

Principles

How Vyuha handles your data.

Data residency

Data for Indian customers is stored and processed in India. Per-region residency is available on request for customers in other jurisdictions.

Encryption

Data is encrypted in transit and at rest. Each tenant's data is stored with separate keys.

Public sources only

Vyuha collects from public platforms, news, feeds and public video. It never accesses private accounts, closed groups or messaging apps.

No private accounts

Vyuha does not ask for, store or use your organisation's social-media credentials to collect data.

Approval-first actions

Nothing is posted or sent automatically. Every outbound action is approved by a named person and recorded.

Audit trail

Every action in the console, from a search to an approval, is recorded and available to your administrators, with export on Command.

Access and isolation

Who can see what.

Tenant isolation

Each organisation's subjects, posts, reports and users live in their own isolated tenant.

Invite-only access

There is no public sign-up. Access is provisioned per organisation, per seat, with role-based permissions.

Single sign-on

SSO is available on Command plans, with role mapping to your directory.

Retention and export

History is retained according to your plan and residency requirements. Export and deletion are available on request.

FAQ

Frequently asked questions

Where is my data stored?

In India for Indian customers. Per-region residency is available on request for customers elsewhere. We tell you exactly where your tenant lives.

Do you need our social-media logins?

No. Vyuha collects public data only and never uses your organisation's credentials.

Can we get a security questionnaire completed?

Yes. Contact us and we will complete your questionnaire and share our documentation under NDA.

Can you delete our data at the end of a contract?

Yes. Export and deletion are part of offboarding, with written confirmation.

Have a security question?

Write to us and a person at Merdot will answer it directly.

Or write to contact@merdot.com