VectorKan — Agile Project Management, Client Portal & Invoicing

Summary: VectorKan requires HTTPS for all traffic and enforces strict transport security and content policies.

Data in transit

All connections to vectorkan.com and customer portal endpoints are encrypted using TLS 1.2 or TLS 1.3 with modern, forward-secret cipher suites.

Cross-Site Scripting (XSS): Prevented via strict Blazor HTML encoding, Content Security Policies, and anti-forgery tokens.
Clickjacking: Blocked via X-Frame-Options: SAMEORIGIN.
MIME Confusion: Prevented via X-Content-Type-Options: nosniff.

An overview of VectorKan's security architecture, HTTPS encryption, STQC & CERT-In aligned headers, multi-tenant boundaries, and password hashing.

Learn how VectorKan ensures complete data separation between different customer organizations at the database and application layers.

Configure password policies, session security, lockout thresholds, and two-factor authentication (2FA).

Learn how production database backups, point-in-time recovery, and multi-zone persistence protect your workspace against data loss.

Learn what happens when an account or workspace is deleted, data purge timelines, and retention rules.

Have questions or need technical assistance? Our engineering and product support team is here to help.