Security and data handling
SOC 2 Type I in progress, where your data lives, how it is kept apart, and the paperwork before you sign.
Verlix holds your contracts, invoices and payments, so a vendor review comes first. This page states what we can confirm today, and nothing beyond it.
SOC 2 Type I in progress
This page names the auditor and the report date once the report is issued.
A Type I report checks that controls are designed correctly at one point in time.
Your data kept apart from every other company's
Strict data boundaries separate each company's data, and the data of its customers, from every other company's.
Data residency in the US, with the EU planned
Verlix offers data residency in the US. EU data residency opens when the EU region launches, and sign-up offers its waitlist until then.
Your data never trains shared models
Your data is never used to train shared models.
GDPR and CCPA requests
Requests to access, correct, export or delete personal data are handled under the GDPR in the EU and the CCPA in California.
DPA and sub-processor list before you sign
A data processing agreement and the sub-processor list are available before you sign.
Reporting a vulnerability
Send it to security@verlix.ai with enough detail to reproduce it. Every report is acknowledged, and we will tell you what we found.