Security & Trust

• Every outreach email requires human approval. Each AI-drafted email is reviewed individually by an owner or admin. There is no setting that lets an outreach email skip approval.
• Approve ≠ Send. Approving a draft does not send it. Sending requires a second, separate action — queueing the approved email — performed by an owner or admin.
• One draft, one recipient. Each draft is bound to a single prospect, and the system's own retries of a queued email never produce a duplicate send.
• Sending is off until it is enabled. New workspaces cannot send external email. Sending is enabled per workspace by VRsion Pro after a safety review, and it can be disabled at workspace level and at platform level at any time. Nothing already approved is lost when sending is paused.

These boundaries are part of the product's design, not configuration options:

• No autonomous outreach — the AI never decides on its own to contact anyone.
• No automatic approval — every approval is a person's explicit decision.
• No bulk campaigns or sequences — outreach happens one prospect, one draft, one decision at a time.
• No automatic follow-ups — follow-up drafts go through exactly the same review, approval and queue steps.
• No scheduled Sales automation running in the background on your behalf.

Each company works in its own workspace. Workspaces are logically isolated: your business profile, prospects, drafts, approvals and activity are never visible to, or reachable from, another company's workspace.

Access checks are enforced on the server and in the database layer — not only in the user interface — and every record your team creates belongs to exactly one workspace.

• Passwordless sign-in. You sign in with a one-time link sent to your email address. There are no passwords to reuse, leak or reset.
• Invitation-only accounts. Nobody can create an account on their own. Access to a workspace starts with an invitation to a specific email address; invitation links are single-use and expire.
• Server-side sessions. Sessions are stored on the server, so signing out ends the session rather than leaving a reusable token behind.
• Roles. Owners and admins can qualify prospects, approve or reject drafts and queue approved emails. Members have read-only access to operations. See Roles & permissions.

• Daily email limit. Each workspace has a daily cap on outbound email. Once it is reached, no further sends succeed that day, however many drafts are approved.
• AI budget. AI usage in each workspace runs against a daily budget. Usage is visible on your Command Center.

Proposals, policy decisions, approvals, rejections, queue actions and send outcomes are recorded for operational review. Your team can follow an email from draft to outcome in Activity. An outcome that cannot be confirmed is shown as uncertain rather than silently retried.

To qualify a prospect or draft an email, VRsion 1 AI sends the relevant business context (your business profile, offers and ideal customer profiles) and prospect information to an AI provider and stores the result in your workspace. The AI provider in use today is OpenAI.

AI output can be wrong. Qualification scores are computed deterministically from your ideal customer profiles; the written explanation and drafts are AI-generated and always reviewed by a person before anything is sent.

VRsion 1 AI runs on established cloud providers:

• Vercel — application hosting
• Neon — database
• OpenAI — AI processing for qualification and drafting
• Resend — sign-in emails, invitations and approved outreach emails

All traffic to the product is served over HTTPS. Credentials for these services are held server-side and are never exposed to the browser. See the Privacy page for how data is handled.

If you believe you have found a security issue, email ai@vrsion.pro with a description and steps to reproduce. Please do not access other customers' data or disrupt the service while investigating.