We ask you to put your brand behind our codes.
That only works if our own security, privacy and residency standards are beyond argument. Here is exactly what we do, in plain language, with no marketing softening.
Architecture & tenant isolation
Every customer runs in a logically isolated tenant. Identifiers, signing keys, consumer records and audit logs are partitioned at the data layer and enforced at the access layer — not filtered by a query parameter that someone could forget to apply.
Encryption & key management
Data is encrypted in transit with TLS 1.3 and at rest with AES-256. Signing keys are held in a managed key store and are never written to application logs, backups in plaintext, or developer machines.
Identity & access control
Access is granted by role and reviewed quarterly. Enterprise customers can federate identity through their own provider, and every privileged action is attributable to a named human being — not a shared login.
India data residency
Serialization records, consumer verification data and backups are stored in Indian data centres by default. This is our starting position, not a paid enterprise upgrade.
DPDP & consumer privacy
A verification scan should not require a shopper to hand over their identity. We collect the minimum needed to trace a unit, and we only collect personal data when the consumer actively chooses to claim a reward or register a warranty.
Operational security
Secure development is enforced by process, not intention. Code review is mandatory, dependencies are scanned continuously, and the same discipline applies to our own staff as to anyone else.
Compliance posture
We are explicit about what we hold today and what is in progress. If an RFP asks for a certification we do not yet have, we will tell you rather than quietly implying otherwise.
Responsible disclosure
If you believe you have found a security vulnerability in VeriTrace, please tell us before you tell anyone else. We will acknowledge within one working day, keep you updated, and credit you publicly if you wish.