Security

Last updated: August 2026

Security isn't an afterthought at Vidoni — it's built into how every app in the suite is designed and run.

1. Protecting your data

Encryption everywhere. All traffic between your device and Vidoni apps is encrypted in transit. Data at rest is encrypted in our databases.
Password storage. Your password is hashed with a strong, industry-standard algorithm before it's ever stored — we can't see or recover it, even internally.
Payments handled by specialists. We never see or store your card details. All payment processing is handled by Stripe, a PCI DSS certified provider trusted by businesses worldwide.
Australian-hosted. Vidoni's infrastructure is hosted in Australia, managed by an experienced local team.

Least-privilege access. Access to production systems and customer data is restricted to what's needed to run the service, and is logged and monitored.
Brute-force protection. Repeated failed login attempts automatically lock an account and trigger an alert, blocking automated password-guessing attempts.
Cross-site request forgery protection. Actions that change your account or billing require a verified token, so another website can't act on your behalf.
Secure sessions. Session cookies are locked down against being read by page scripts or sent across sites — two of the most common ways a session gets hijacked.
Browser-level hardening. Standard security headers protect against clickjacking, content-type sniffing, and insecure connections.
Rate limiting. Every endpoint enforces limits that blunt automated abuse and scripted attacks.

Ongoing vigilance. We continuously monitor for unusual account activity, unauthorised access attempts, and abuse of the service — and act on what we find.
Responsible disclosure. If you believe you've found a security issue, let us know via the contact form and select "Security issue" — we take every report seriously and will respond promptly.
Built to evolve. Security practices are reviewed and improved on an ongoing basis as the platform grows.