Security

We build our products with a security-first mindset. Our architecture follows principles of least privilege, separation of duties, encryption in transit and at rest where appropriate, and ongoing monitoring. Sensitive operations, such as payments and account changes, are protected by layered controls designed to detect and prevent unauthorised access or abuse.

We continuously review our systems, dependencies and processes, and we invest in tooling and practices that help us find and fix issues before they become incidents.

Trust on Vendigo is built through verification. We may verify the identity of users and the legitimacy of businesses before granting access to certain features, such as selling, payouts or higher-value transactions. Verification helps reduce fraud and gives users clearer signals about who they are transacting with.

Verified status does not guarantee that a user will always act in good faith, so we combine verification with transaction protections, reviews and dispute resolution to keep the marketplace safer.

When a buyer pays for an order on Vendigo, the funds are held in escrow by licensed payment and escrow partners until the buyer confirms receipt or a confirmation window passes. This protects buyers, who can raise a problem before funds are released, and sellers, who know the funds are secured before they ship or deliver. Disputes are assessed using evidence from both parties, and the escrow provider is instructed to release, refund or settle funds accordingly.

We may pause, extend or reverse escrow where a dispute is open, where fraud or unusual activity is detected, or where we are required to by law.

If you believe you have discovered a security vulnerability, or that your account or a transaction has been compromised, please contact us immediately through the contact details on our website. We take reports seriously and will investigate and respond where appropriate. We encourage responsible reporting and will not take action against good-faith reporters who follow this process.