Skip to main content
VerifyAll logo

Security

How VerifyAll handles your data

A check touches personal and business data. This page says, in plain terms, what happens to it and who else processes it.

What is true of every account

Seven practices that apply to every check run on VerifyAll.

Encrypted in transit

Every connection to VerifyAll uses HTTPS, so data is encrypted while it travels between you, us and the source.

Consent recorded per check

Consent is recorded for every check on a person, with a timestamp, and stays with that check.

An audit trail on every action

Every action in the account carries an audit trail, and the account's admins can see it.

Role-based access

Admins control who is in the account and which checks each member can run. The owner and admins see every check. A team member sees only the checks they created.

Automatic sign-out

You are signed out after 2 hours without activity. Everyone signs in again at least every 30 days.

Live results, not cached copies

Every result is fetched live when the check runs. We do not serve cached copies.

Scheduled auto-deletion

Scheduled auto-deletion of check data can be switched on in the account. Each deletion is confirmed by email.

Sub-processors

Who else processes data

These kinds of service providers process data on our behalf, each only for the purpose listed. Customers can ask for the named list under a confidentiality agreement.

Type of providerPurpose
Verification servicesRun each check: the identifier and the details entered for the check (for example a PAN, a name, a date of birth, a mobile number, a registration number) are sent to the service that runs that check, and its answer comes back.
Payment gatewayCard, UPI and net-banking payments. We never see or store card details.
Email and messaging servicesAccount emails, reports and optional result notifications
AI model providersAI summaries, document scan and AI-content checks. Your data is not used to train their models.
Usage analyticsHow the website and dashboard are used. What is typed into forms is masked.
Cloud hosting and storageRunning the website, the dashboard, the application servers and the database
Error monitoringFinding and fixing faults in the dashboard and the application servers

Personal data

Personal data is processed on the customer's instruction. We do not sell data. Requests about personal data go to support@verifyall.ai.

Certifications

VerifyAll does not claim any security certification. A written description of our security practices is available on request.

Questions about security

Write to us for the written security description, or with any request about personal data.