POLICY / 01
Purpose and scope
This policy describes security practices and expectations for the Vet-Telligence veterinary intelligence platform. It applies to access to the platform, connected practice data, uploaded files, reports, and the people who use them.
Our objective is to protect the confidentiality, integrity, and availability of practice information. Security is a shared responsibility between Vet-Telligence, our service providers, and each participating practice.
POLICY / 02
Information handled by the platform
Depending on the features and integrations a practice uses, Vet-Telligence processes account names and email addresses, practice and hospital associations, financial and operational metrics, clinical activity data, uploaded financial files, and generated reports. Connected services may also require authorization tokens and integration identifiers.
Only submit information your organization is authorized to share and that is needed for the selected feature. Keep passwords, API keys, payment card details, and unnecessary personal information out of uploads, free-text fields, and support messages.
POLICY / 03
Account security and access
Vet-Telligence supports sign-in through Microsoft and Google, with partner single sign-on available for supported integrations. These providers handle the sign-in credentials. Practice access and administrative functions depend on account roles and hospital associations within the platform.
Use an individual work account, enable multifactor authentication with your identity provider, and follow your organization's account security requirements. Administrators should grant only the access needed for a person's work, review hospital memberships, and promptly remove access when responsibilities or employment change.
Do not share accounts, session cookies, registration invitations, or integration credentials. Sign out on shared devices and report unexpected sign-in activity promptly.
POLICY / 04
Data protection and handling
Use the platform over HTTPS. Application database connections are configured to use encryption and validate server certificates. Vet-Telligence uses cloud services for application hosting, database storage, file storage, and report delivery.
Downloaded reports and files are subject to your organization's own access, storage, and sharing controls. Store exports on approved devices and services, verify recipients before sharing, and retain only the copies needed for your work.
Coordinate requests about data retention, exports, integration disconnection, or deletion through your practice administrator and your Vet-Telligence contact. Disconnecting an integration does not by itself establish that previously imported records or backups have been deleted.
POLICY / 05
Connected services and AI features
Depending on configuration and feature use, the platform connects with services such as Microsoft Azure and Power BI, Google and Microsoft identity services, AllyDVM, QuickBooks, Stripe, and email delivery providers. Information required to provide a selected feature may be processed by the relevant service. Each provider's own terms and security practices also apply.
When AI-assisted P&L insights are enabled and used, practice names, reporting periods, financial totals, account names, and relevant operational context may be sent to Google's Gemini service to generate analysis. Review your organization's permissions before using these features, and review generated recommendations before acting on them.
Practice administrators should authorize integrations deliberately and revoke access that is no longer needed. This policy does not make a separate promise about a provider's data retention or model training practices.
POLICY / 06
Responsible use
Access only the practices, accounts, and information you are authorized to use. Do not bypass access controls, use another person's session, introduce malicious files, interfere with service availability, or attempt to retrieve another practice's data.
Keep devices and browsers updated, protect devices with an appropriate screen lock, and use your organization's approved security tools. Maintain source records and any independent copies needed for your practice's continuity procedures.
POLICY / 07
Reporting a security concern
Report suspected unauthorized access, exposed information, suspicious account activity, or a potential vulnerability promptly to your practice administrator and your established Vet-Telligence contact. Identify the message as a security concern and request a secure channel before sharing sensitive evidence.
Include the affected page or feature, the approximate time and time zone, a description of what happened, and safe steps to reproduce the issue. Redact personal information and secrets from screenshots. Never send passwords, access tokens, session cookies, or full practice datasets in an initial report.
If you encounter information you are not authorized to access, stop and report it. Do not download additional records, change data, disrupt service, or publicly disclose sensitive details. Coordinate any security testing with Vet-Telligence in advance.
Reports should support assessment of the issue, containment of affected access, investigation, and remediation. Incident communications and any required notices depend on the confirmed facts and applicable obligations; this page does not specify a guaranteed response or resolution time.
POLICY / 08
Policy updates and questions
This policy is a public explanation of platform security and user responsibilities. It is not a security certification, an independent audit report, or a guarantee that every security incident can be prevented. Specific contractual commitments are governed by the applicable agreement.
The policy may be updated as the platform and its integrations change. The date below identifies this version. For questions or requests for additional security information, contact your established Vet-Telligence representative through your practice administrator.