What Vautra Collects
Account data
Content data
Usage and technical data
Payment data via certified partners
GDPR & HIPAA Compliance
Compliance built into the architecture.
VS3 was designed for regulated industries. GDPR and HIPAA requirements are encoded into the storage architecture, audit trail, and key management layer.
GDPR
General Data Protection Regulation
Legal Basis for Processing
Contractual necessity
Consent for marketing
Legal obligation compliance
Legitimate interest for security monitoring
Where Your Data Is Stored
European region preference
Encryption at rest and in transit
Protected international transfers
Region selection enforced
Data Retention
Account data retention
Uploaded-file deletion
Billing record retention
Archived audit logs
Your GDPR Rights
Access
Rectification
Erasure
Portability and objection
Data Processing Agreement
DPA available
Sub-processor list
Breach notification
Audit rights
HIPAA
Health Insurance Portability and Accountability Act
Vautra's Role
Business Associate support
PHI handling
No file-content analysis
BAA before PHI storage
Technical Safeguards
Encryption at rest and in transit
Immutable audit log
File integrity verification
Session controls
Audit Trail
Every file action recorded
Low-latency queries
Blockchain object proofs
Exportable records
Breach Notification
Covered Entity notification
Incident response activation
Regulatory documentation
Safe-harbor aligned architecture
Powered by Anryton
A blockchain audit layer
you can verify independently.
VS3 uses Anryton — Vautra's own EVM-compatible private Layer 1 blockchain built on Cosmos SDK with Tendermint consensus — to store object proofs for every file action. This creates a tamper-proof external verification layer for every file stored on the platform.
Anryton is fully owned and operated within the Vautra ecosystem — it is not a third-party dependency. Learn more at anryton.com →