Payments
Card data never touches our systems.
Card payments run through Stripe's hosted checkout. We receive a payment status and a reference, not a card number. That keeps ValoPal out of PCI scope by design rather than by policy.
Security & trust
What we protect, and how — without overclaiming.
ValoPal holds guest names, plates, vehicle photographs and payment status on behalf of a parking operator. This page describes the mechanisms we rely on, and states plainly where we are not yet.
Mechanisms
Controls in place today.
Guest access
Passes are short-lived signed links.
A guest pass is a signed link scoped to a single ticket. It cannot reach staff functions, another ticket, or another operator's data. That boundary is enforced on the server and covered by tests.
Staff access
PIN sign-in binds a person to a device for a shift.
Staff sign in with a PIN that ties them to one device for one shift. Every action carries who did it, what changed, when, and from which device.
Audit trail
Append-only. Nothing is edited in place.
Records are never overwritten. A correction is a new entry with a reason attached, so the earlier state stays visible and a manager can see what was changed and why.
Isolation
Every record is scoped to operator, location and stand.
Tenancy is part of the data model, not a filter applied at read time. One property cannot see another property's tickets, staff, photos or reporting.
Retention
We collect what the workflow needs, then delete it.
Guest personal information and vehicle photographs are deleted after the ticket closes plus the operator's configured dispute window. Non-identifying operational events stay for reporting.
Compliance
Where we are on formal compliance.
SOC 2 Type I is on our roadmap and has not been achieved. We hold no security certification today, and we will not imply otherwise. If your procurement process requires an attestation report, we are not there yet — tell us what you need and we will tell you honestly whether we can meet it.
Disclosure
Responsible disclosure.
If you believe you have found a vulnerability, email us with enough detail to reproduce it. We will acknowledge the report, keep you updated, and will not pursue action against good-faith research.
Related: Privacy policy · Subprocessors