Security isn't an afterthought at VistaPact — it's foundational. Built by HGA, an organization that manages billions in contracts across regulated industries, we hold ourselves to the standards our own operations demand.
All data encrypted in transit (TLS 1.2+) and at rest (AES-256). Keys managed through dedicated key management services with automatic rotation.
Role-based access control (RBAC) with SSO/SAML integration. Granular permissions at the organization, team, and document level.
Immutable, timestamped logs of every action — document access, edits, approvals, signatures, and administrative changes.
Hosted on SOC 2-compliant cloud infrastructure with geographic redundancy, automated failover, and 99.9% uptime SLA.
Encrypted daily backups with point-in-time recovery. Geographically redundant storage ensures data durability.
Your contract data is never used to train general-purpose AI models. AI processing occurs within our secure infrastructure under the same access controls.
VistaPact runs on hardened cloud infrastructure designed for regulated workloads. Every layer — from network to application — is built with defense in depth.
Security practices informed by 25+ years of managing sensitive data across government, energy, and infrastructure programs.
Integrate with your identity provider. Enforce MFA, session policies, and provisioning from your existing IdP.
Granular permissions at organization, team, and document level. Admins control who can view, edit, approve, and sign.
Every action is logged with timestamp, user, and context. Logs cannot be modified or deleted — even by administrators.
Regular security assessments, dependency scanning, and patching cadence to maintain a secure application surface.
Customer data is logically isolated. Strict tenant boundaries ensure no cross-customer data exposure.
Documented incident response procedures with defined escalation paths and 72-hour breach notification commitment.