Your business information stays protected
How we protect your inbox, customers and records.
NDA first
Every VA signs before getting access.
Safe passwords
Shared only through a vault.
Two-factor logins
Switched on for every account.
Same-day offboarding
Access removed when work ends.
Least access
Only what each task needs.
Monthly reviews
Access checked every month.
More detail on every safeguard
Confidentiality
Every VA signs a non-disclosure and confidentiality agreement before they get any access.
Passwords
We never receive or send passwords by email, chat or text. Logins are shared through a password-manager vault, and access to the vault is logged.
Two-factor authentication
Two-factor authentication is switched on for every account your VA uses.
Least access
Your VA gets their own role-limited login with only the access their tasks need: never payment, banking or account-settings access unless you decide otherwise.
Where work happens
Client work is done on our private, secure workspace, not in personal inboxes or chat apps.
Devices
No client data is stored on personal devices. Every work device has an encrypted disk, a screen lock, current security updates and anti-malware, and public Wi-Fi is not used for client work.
People and training
Every VA is trained in data protection and our security rules before working with clients, with a refresher every year.
Access reviews
Account managers review each VA's access every month and remove anything no longer needed.
When an engagement ends
Access is revoked and passwords rotated the same day. At your choice, we return or delete any of your data we hold and confirm in writing within 7 days, keeping only what the law requires (for example invoices).
Call recording
Calls between our team and you may be recorded for quality and training. We say so at the start of every recorded call, keep recordings securely, and delete them after 90 days unless you ask us to keep them. We never record calls with your customers unless you ask us to and they are told first.
If something goes wrong
If we suspect a data incident affecting you, we tell you within 24 hours and help you meet your own legal duties.
Contracts
We sign a data processing agreement with every client that needs one (UK GDPR Article 28, Australian Privacy Principle 8).
Offshore work
Our team works from Nairobi, Kenya. You stay in control of your data; we follow your instructions and the safeguards in our agreement.
Ask us anything before you start
We'll sign your data processing agreement.
More detail
- Privacy policy: how we handle personal information on this website
- Our promises in detail: replacements, support and response times
- Request a quote or email enquire@thebestvas.com
Ready to get time back in your week?
Answer a few quick questions.
Under 1 hr enquiry replies, down from 4 business hours · Flash Party Photo Booth, Central Texas, USA