Security controls your team can inspect

Your AI decisions carry sensitive business context. VeriProof combines role-based access, data protection, and tamper-evident records so your team can examine the controls behind its governance work.

Deployment choices

Choose where VeriProof works for you

Use VeriProof-managed SaaS today. Private Enterprise is coming soon to Azure Marketplace for organizations that need VeriProof in their own Azure subscription.

Protect access to your AI decision data

Identity and least privilege

Give people access within their assigned role and application scope, with separate permission checks for customer and staff users.

Where the service runs

The managed service runs in Azure in the United States (Central US). Private Enterprise will instead run the platform, your decision data, and its integrity ledger in your own Azure subscription.

Encryption and key protection

Protect stored data and data in transit with Azure encryption, backed by Key Vault for platform secrets and keys.

Sensitive data controls

Reduce sensitive text sent to a model with supported SDK masking. Your application can add controls for the data it handles.

Agent and CLI access

Let AI assistants work with VeriProof, limited to the actions you allow. For command-line work, the CLI keeps saved sign-in credentials in your operating system's protected store.

Security review and remediation

Report a vulnerability

Found something? Use the form below to ask for a private reporting channel, and leave exploit details out of that first message. We reply within one business day.

Test the service yourself

Your team or your assessor can test the managed service. Written rules of engagement set the scope, methods, and rate limits first. Read the testing rules.

Retention and deletion

Match the lifetime of session content to your recordkeeping needs with application retention and legal holds.

Check the evidence behind a decision

Give reviewers a way to check whether sealed evidence has changed. Cryptographic verification adds an integrity check to the history of a decision.

Verify the release you are running

Releases are signed by VeriProof's protected build workflow and are reproducible from their source commit. Private Enterprise installs will also record what was installed in your own storage. See the verification chain, or go straight to the verification guide.

Want to read the code? Source access is available on request under the standard VeriProof software license. SaaS plans get the security review tier, to read and inspect it. The modification tier, to change the code and run it in your own environment, comes only with Private Enterprise and is set in the agreement.