Authentication and sessions
User access uses server-managed sessions rather than client-only authentication.
Developers / Security
Security decisions made at the identity, data, and payment boundaries.
VirtusCloud applies server-side authorization, user-scoped data access, hosted payment handling, input validation, and controlled credentials across the current application architecture.
Talk to our teamAvailable now
Current application controls are active. Formal certifications and enterprise SSO are not claimed as generally available.
What changes for your team
01
Protect account sessions
02
Scope data by user and business
03
Keep card entry hosted
04
Validate sensitive operations
Capabilities
What the product actually does.
Authorization
Protected operations check the signed-in user and relevant business scope before data access.
Payment boundary
Stripe-backed hosted checkout handles sensitive card entry outside the VirtusCloud portal.
Input validation
Server-side actions validate operational input before database or payment changes.
Credential handling
Service credentials remain in the server environment rather than being embedded in client interfaces.
Certifications and SSO
No blanket certification or enterprise SSO claim is made; current requirements must be reviewed with support.
Planned — contact supportEnd-to-end workflow
How the work moves.
01
Authenticate the user
Establish a server-managed session before protected application access.
02
Authorize the operation
Check the user, role, and business ownership relevant to the requested record.
03
Validate the input
Reject malformed or disallowed values before they reach the database or payment layer.
04
Keep sensitive work server-side
Use protected services and hosted payment flows for credentials and card entry.
Where it fits
Portal access
Keep customer and administrative interfaces behind the correct host and authorization boundary.
Business data
Restrict queries and mutations to the signed-in user’s permitted business context.
Payment collection
Avoid collecting raw card details inside the application interface.
Questions
Before you decide.
Is VirtusCloud SOC 2 or ISO certified?
No such certification is claimed on this page. Ask support for the current security and procurement position.
Does VirtusCloud store card numbers?
The current online payment flow uses Stripe-hosted checkout for sensitive card entry.
Continue exploring
Scope the right version