Security

Last updated 26 July 2026 · Mentor Agora Ltd

This page describes how we protect Veyl. It is a plain-language overview for customers — not a certification claim. We do not claim SOC 2, ISO 27001, or similar audits unless we publish a current report.

1. Product stance

Veyl is a floating meeting assistant. Capture stays with you: we do not join meetings as a bot. Where the platform allows it, the desktop widget can stay hidden from screen sharing so coaching UI is not shown to others on a share.

2. Transport and hosting

Encrypted connections (HTTPS) for traffic to meetveyl.com
Application hosted on modern cloud infrastructure
Account and product data stored in a managed cloud database with access controls

3. Sign-in

Email and password accounts
Secure browser sessions
Connecting a calendar (Google Calendar or Outlook) is separate from signing in to Veyl — you control that connection and can remove it anytime

4. Access control

Controls so users reach their own data, not others’
Calendar connection credentials are kept on our servers and used only to sync your schedule
Admin tools are limited to designated admin accounts

5. Secrets

Service credentials and keys live in secure environment configuration — not in public code or the browser. Production secrets are managed through our deployment platform.

6. Payments

Card payments are handled by our payment provider. Veyl does not store full card numbers on its servers.

7. AI and your data

Live audio is sent to our speech provider (AssemblyAI) for transcription. Text and related content may be sent to our AI provider (OpenAI API) to generate coaching, summaries, Ask, Compose, and similar assists you request.

Do you train AI on my meetings? No. Veyl does not use your meeting content or personal information to create, train, or improve foundational or generalized AI models.
Do OpenAI or AssemblyAI train on my data? We use their APIs to deliver the features you request. They state that API customer data is not used for training by default; we do not opt in to training.
Is Google Calendar data used for AI? Only to power features you use — for example, grounding Ask on a meeting linked from your calendar. Never for ads or model training. See our Privacy Policy for Limited Use and processor detail.

8. Calendar connections

Read-only access to your schedule — we do not write events back
Free accounts can connect up to 2 calendars; paid accounts up to 10
You can disconnect or remove a connection in Veyl
You can also revoke access from your Google or Microsoft account settings

9. Desktop app

macOS builds are distributed signed and notarized where we publish them. Windows builds may still show OS trust warnings until code signing is complete. Only download installers from meetveyl.com / our official download page.

10. Vulnerability reports

If you believe you have found a security issue, email support@meetveyl.com with details and steps to reproduce. Please give us a reasonable chance to investigate before public disclosure.