Your book of business, treated like it
Your database is the asset your agency is built on. Here is exactly where it lives, who can see it, and what the AI does and does not do with it.
EU-hosted on AWS
The application, database and file storage run in AWS eu-west-1 (Ireland). Some specialist providers, such as AI, meeting recording and contact enrichment services, process limited data outside the UK and EU. Ask us for the current list and where each one processes data.
Per-tenant isolation
Every candidate, client, note and invoice is tied to your agency's account, and every request is scoped to it. Other agencies cannot see your records.
Encrypted in transit and at rest
Your data travels over TLS and is encrypted at rest in the database and file storage.
Role-based access and audit history
Roles and permissions control who can see and change what. Sign-ins and key actions are logged, and edits to clients, contacts, roles, deals and submission stages keep field-level history: who, what, when, and what it was before.
We never train shared models on your data
Vayora learns your desk: your shortlist decisions, your drafting edits, your patterns. That learning stays inside your account and is never used to train models shared with other customers.
GDPR workflows built in
Admins can erase a candidate from the record themselves, meeting recordings capture consent, and do-not-contact is checked before outreach, sequence and pitch sends. You can set a retention period; automatic enforcement of it is not switched on yet, so we handle retention deletions on request.
No lock-in, by design
Your candidates export to CSV from the app whenever you want, and we will export your whole account, including clients, roles, notes and documents, on request. We would rather keep you with the product than with the exit cost.
Ask us the hard questions
We will walk through our security setup, subprocessors and data flows on the call, with the engineers who built it. If your client contracts need specific terms, bring them.