Enterprise diligence

Get the evidence your security review needs

Security, legal, and procurement teams need different answers. Find the public information here, then discuss the evidence needed for your decision.

Vendor review

Bring the right information to your review

Start with the areas that matter to your team. The Trust Center lists every review material we have, public or on request.

A review built around your decision

Your deployment

Use VeriProof SaaS today, or plan for Private Enterprise in your own Azure subscription. Your review can focus on the service you will actually run.

Data protection

Where does decision data go? Discuss access, retention, and data flows against your organization's requirements.

Your questionnaire

Bring your security questionnaire or evidence requirements to the review, whether you use SIG Lite, CAIQ, or your own format.

Procurement and legal

Technical answers are only part of the decision. Include data processing terms and contracting questions in the same conversation.

Discuss the evidence behind your requirements

Need a particular document or agreement? We share it with the scope and access terms for your review.

  • Data processing: The data processing agreement, with the subprocessor list it refers to.
  • Questionnaire answers: Your SIG Lite, CAIQ, or in-house questionnaire, answered for the deployment you plan to use.
  • Source access: The security review tier for SaaS plans. The modification tier comes only with Private Enterprise, set in the agreement.
  • HIPAA contracting: Your proposed data flow and the applicable Business Associate Agreement terms.

Choose where your decision data lives

VeriProof operates the SaaS service in Azure in the United States (Central US). Each environment uses Azure SQL Database Ledger for proofs by default, or the Solana blockchain if chosen when the environment is created.

Private Enterprise is coming soon to Azure Marketplace. Your organization will own and operate the whole platform in its own Azure subscription, completely separate from VeriProof SaaS.

Read about Private Enterprise.

Diligence questions

Share your questionnaire, the deployment you are considering, and your deadline. We'll confirm the response scope and timing.

SaaS data is stored in Azure in the United States (Central US). Private Enterprise will keep your decision data and its integrity ledger in your own subscription, isolated from VeriProof SaaS.

Your organization will own and operate the installation in its own Azure subscription.

Yes, on request, under the standard VeriProof software license. It covers the SDKs and the platform, in two tiers. The security review tier lets your team read and inspect the code, and SaaS plans get this tier. The modification tier also lets you change the code and run it yourself. It comes only with Private Enterprise and is set in the agreement.

Each release is signed by VeriProof's protected build workflow and is reproducible from the commit named in its manifest. Your team can rebuild it and compare the result with what was installed. See how release verification works.

Start your vendor review

Bring your questions, questionnaire, or evidence requirements. We will confirm the review scope and timing with you.