Each person keeps
- Their Valori portfolio: the awards and recognition they received
- Certificates, downloadable as PDFs
- Share links they control and can turn off anytime
- Access to their portfolio after they leave the company
Where your data lives, and who owns what.
Small teams rarely have a security department to ask. Here is the plain-English version; the Privacy Policy and Terms have the full detail.
How we protect it.
Hosted in the US
Your data lives in Supabase’s US East region (AWS, Northern Virginia). The website and app are served by Vercel.
Encrypted
Data is encrypted in transit and at rest.
Each company kept separate
Database access rules (row-level security) keep every company’s data apart from every other company’s.
Payments through Stripe
Stripe handles billing. Valori never stores card numbers or security codes.
Sign-in
Email or Google sign-in, with Cloudflare Turnstile blocking bots. Single sign-on (SSO) isn’t available yet.
Certifications
Valori doesn’t have its own SOC 2 report yet. The providers that host the app and its database maintain SOC 2 compliance.
Who owns what.
Your company keeps
- The team feed, with its comments and reactions
- Recognition people gave to others
- Your awards, values, branding and settings
- Insights and admin records
About “verified.” A verification is a manager’s sign-off, by name and date, on a portfolio record as it was written. If the record is edited, it needs verifying again, and a verification can be withdrawn with a reason.
How Lori uses AI.
Lori notices. People thank. AI in Valori is off until an admin turns it on. When it’s on, only the message someone asks Lori about is sent to Anthropic, which doesn’t use it to train models. Valori doesn’t store that text or Lori’s replies.
Lori can
- Asks questions that help someone make their recognition specific
- Suggests which company values a recognition fits, for the sender to confirm
Lori never
- Writes or sends recognition for anyone
- Picks award winners
- Scores performance or predicts who might leave
- Reads your Slack messages or direct messages
- Marks anything “verified” (a person always does)
Your choices.
Copies, corrections and deletion
Anyone can ask for a copy of their data, a correction, or deletion of their account by emailing privacy@valoriapp.io. To close your company’s account and delete its data, an admin can email the same address. The Privacy Policy explains how to delete an account in the app.
We don’t sell your data
Valori is paid for by subscriptions. We don’t sell personal information, and the app has no ads. Ad measurement runs on this marketing website only; the Privacy Policy explains it and how to opt out.
Service providers
- SupabaseDatabase, sign-in and file storage
- VercelHosting for the website and app
- StripePayments and billing
- ResendAccount, billing and notification emails
- PostHogProduct analytics (no session recording)
- Cloudflare TurnstileBot protection on sign-up and login
- GoogleOptional sign-in with Google
- SlackOptional, when an admin connects it
- AnthropicOptional AI assist, only when an admin turns it on
- Meta, X and LinkedInAd measurement on this marketing website only
Questions
Need something for your review?
If your team has a security questionnaire or data protection questions, email us and a real person will reply within two business days.