for your information

Security & trust

A plain-language summary of where the data lives, who can touch it, and what happens when things break. Aimed at procurement, but useful for anyone curious.

1. Data sources & licensing

All datasets in eolas come from public NZ government and intergovernmental sources. We don't generate or transform the underlying values — we package the data into one consistent API.

Every dataset detail page links to the canonical source so you can verify lineage yourself. We have no exclusive rights to any of this data — you could always fetch it directly. eolas just saves you the scraping.

2. Hosting & geography

3. Uptime & observability

4. Application security

5. Privacy & PII

6. Incident response

If something breaks badly enough to affect customers — outage, data quality regression, security event — here's what happens:

  1. Sentry / Better Stack / EventBridge alert fires within minutes.
  2. Status page is updated to reflect the affected subsystem.
  3. For security-relevant incidents: affected customers are emailed within 72 hours of confirmation (NZ Privacy Act default).
  4. Post-incident review published as a Changelog entry within 7 days.

Report a vulnerability privately at security@virtus-solutions.io. We commit to acknowledging within one working day.

More questions?

If you're doing procurement diligence, we can fill out a vendor security questionnaire on request.

Get in touch