Role-aware access
V-Tickd uses role-aware access patterns so users can work with functionality and client work appropriate to their practice responsibilities.
Security & Trust
Protecting the information your practice relies on
Veloce products are designed with controlled access, secure cloud infrastructure and operational safeguards appropriate for professional workflows.
Security posture
Layered safeguards for professional SaaS workflows.
Authentication and authorised product access
Role-aware permissions for practice workflows
Organisation-scoped application data
Application-controlled evidence and document storage
Operational logs and service monitoring signals
Human review for professional accounting decisions
Our approach
Security Is Built Into the Product Architecture
Veloce uses layered controls across authentication, authorisation, tenant-scoped data, infrastructure, data handling, auditability, integrations and operational monitoring.
Practice data isolation
Application workflows are scoped to the relevant organisation, with product data and operational access handled in that tenant context.
Controlled client portals
Client-facing product experiences are separated from the public website and handle uploads through authenticated or controlled application workflows.
Auditability
Relevant workflow activity and evidence history are recorded to support traceability inside the workflows that expose audit history.
Data protection
Controlled access to professional workflow data
Veloce products handle accounting workflow records, document evidence and signing data through application-controlled paths. Public pages do not expose customer records, product tokens or internal infrastructure identifiers.
HTTPS public access
The public Veloce website and product entry points are served over HTTPS. Customer-facing forms submit through controlled application routes.
AWS-hosted infrastructure
Veloce uses Amazon Web Services infrastructure for its public website and product delivery, with application services configured around service-level permissions.
Private product storage
Product evidence and documents are handled by application-controlled storage paths rather than being exposed through general public website access.
Integrations
Accounting Professionals Stay in Control
V-Tickd organises operational accounting workflows and surfaces attention signals. Accountants and bookkeepers remain responsible for review, judgement and filing decisions.
Where Xero connectivity is enabled, users authorise access through the application rather than sharing their Xero password with Veloce.
Xero-derived information is used to support operational attention and review workflows. It is not presented as proof that a period is fully reconciled.
V-Tickd helps organise accounting workflow readiness. It does not directly file tax returns with HMRC or accounts with Companies House.
Monitoring
Operational Signals for Service Health
Production services generate logs and monitoring signals used to identify application errors and service issues.
Application events
Supported workflows record relevant operational actions for traceability.
Credential handling
Sensitive credentials are not published in the website source or shown on public pages.
Controlled access
Customer information is handled through authenticated or application-controlled product workflows.
Security FAQ
Common Security Questions
Where is Veloce hosted?
The public Veloce website is delivered through AWS-hosted infrastructure. Product services also use AWS-based infrastructure, with architecture details available during customer security review.
Is data encrypted?
Public website traffic is served over HTTPS. For product data, Veloce uses application-controlled cloud storage and access paths; detailed encryption configuration can be reviewed during procurement or onboarding.
Can every staff member access every client?
V-Tickd is designed around organisation-scoped and role-aware access so practice users work within the client and workflow context available to their role and assignment.
How is Xero connected?
Where Xero connection is enabled, it is handled through authorisation workflows rather than asking users to provide their Xero password directly to Veloce.
How do I report a security concern?
Use the existing contact route and include enough context for the Veloce team to review the concern.
Security questions
Need more detail for your practice review?
If your practice is evaluating V-Tickd or V-Cloud Sign and needs more information about our security approach, contact us through the existing Veloce route.