Shared Responsibility Model
VeeSafe provides the tools. You provide the truth. Compliance is shared, not outsourced.
You own this
- Accuracy of every input you provide
- Maintaining MFA on every account
- Managing your users and their access
- Implementing and maintaining your controls
- Reviewing every generated document before you rely on it
- Compliance with all laws and regulations that apply to you
- Protecting your own devices and networks
- Submissions to SPRS, eMASS, primes, or regulators
VeeSafe owns this
- Platform availability and performance
- Infrastructure security
- Encryption in transit and at rest
- Authentication mechanisms
- Logical tenant isolation
- Vulnerability management
- Subprocessor oversight
We share this
- Data integrity
- Incident response coordination
- Secure configuration of integrations
- Evidence management
- Documentation accuracy