Trust Center
Everything your security and compliance team needs to review Vantage Fit before a demo. Certifications, data hosting, what we collect, who can see it, and how to request documentation.
Download the ISO certificates below, or email our security team at security@vantagecircle.com for the SOC 2 Type II report, DPA, and BAA.
No acquisition, no rebrand, no forced migration for our customers.
Regional hosting is standard, not an enterprise add-on.
Individual health data stays private. HR dashboards report aggregated participation, health patterns, and engagement levels.
Personally identifiable information stays inside the Vantage Fit ecosystem, never shared.
A health-risk questionnaire, an optional profile, uploaded lab reports, mood check-ins, and activity synced from Apple Health, Fitbit or Garmin. All of it is optional. Onboarding and the assessment can be skipped, and Lite Mode collects none of it.
Your organization picks the hosting region and decides how the program runs. Vantage Fit stores and processes employee data on your behalf, within that region, under a signed Business Associate Agreement (BAA) covering lab-report data.
Employees choose what to share. The health assessment, profile, and lab-report uploads are opt-in and can be skipped. Wearable connections use each provider's own consent screen.
An employee can permanently delete their own lab reports. On account deletion the name and email are hashed and sign-in is cleared, while aggregate historical activity is retained for reporting. When someone leaves, their account is deactivated so they can no longer sign in.
AI is used in exactly two places: reading the values off an uploaded lab report, and writing group-level summaries from aggregated signals with no personal identifiers attached. No model profiles an individual for HR.
Vantage Fit is a habit product, not a clinical or surveillance tool. We measure success by whether employees open the app, and employees only keep opening an app they trust.
Download our ISO 27001 and ISO 27701 certificates below. For SOC 2 Type II, our DPA, BAA, and VAPT report, email our InfoSec team at security@vantagecircle.com.
Our ISO certificates are available to download below. SOC 2 Type II, our DPA, BAA, and VAPT report contain sensitive detail and are shared with your security team on request.
From the first call, the team was extremely transparent, collaborative and considerate of all our corporate requirements.
Our team answers security and compliance questionnaires directly.