Tenant isolation
Your business data is isolated from every other account on NearVance, enforced at the database level, not just in the interface.
Trust Center
You stay in control, by default.
Connecting your Google Business Profile means trusting software with your public presence. Here's exactly how NearVance controls what it can do, and what always stays in your hands.
Owner-controlled automation
What actually governs an automated action.
- Every automation type — review replies, Google Posts, profile changes, listings, website content, bulk actions — has its own setting: off, draft only, approval required, or automatic.
- Turning on automatic mode requires reading and accepting a specific consent explaining what it will and won't do. You can turn it back off at any time.
- Low-confidence AI output is held for your review instead of being published automatically.
- Negative reviews and complaints are held for you by default, never auto-replied.
- You can pause all automation for a business instantly, and the reason is logged.
- Every automation policy and guardrail change is versioned, so there's a record of what changed and when.
Security practices
How your connection is protected.
Approval by default
Nothing publishes to Google until you approve it, unless you've explicitly turned on automatic mode for that specific task.
No exposed secrets
Provider tokens, credentials, and AI prompts are never included in activity logs or error messages you can see.
Scoped Google connection
OAuth sign-in uses short-lived, HTTP-only, secure cookies scoped only to the Google connection flow, removed after it completes.
Verified billing events
Billing webhooks are cryptographically signed and verified before anything changes on your account.
Standard security headers
Every response carries content-security, frame, referrer, and transport-security headers.
What this page is, and isn’t
A description of how we build, not a compliance certificate.
This page describes the actual controls and safeguards built into NearVance today. It isn’t a substitute for a formal certification like SOC 2, and it doesn’t replace the legal detail in our Privacy Policy and Terms — those govern what data we collect and your rights over it. If something here is unclear, ask us directly.
Ready when you are
See the controls for yourself.
Connect one business with no card and see the approval screen before anything publishes.