Security architecture
See full design controls, cryptographic controls, and disclosure process on Security.
VERIDU Trust Center
One architecture. Two products. Defensible controls for VERIDU Verify and VERIDU Identity.
Machine-readable manifest: /.well-known/trust.json
Security at VERIDU — one-page PDF
Download security overview PDF
Generated from engineering source: github.com/adiokaapp/veridu-platform/docs/trust/security-overview.md
Certification and framework status
| Framework | Status | Target | Evidence | Access |
|---|---|---|---|---|
| SOC 2 Type II | Audit in progress | 2026-12-31 | Under NDA | |
| ISO 27001 | Gap assessment in progress | 2027-03-31 | Under NDA | |
| HIPAA BAA | Available for enterprise contracts | Current | Template available | |
| DPIA | Maintained | Current | Summary under NDA | |
| Penetration test report | Engagement in progress | 2026-12-31 | Report under NDA |
Patent status
Provisional Application No. 64/030,137 — filed April 5, 2026 · Linked filing: 19/658,447
Non-Provisional Utility Application No. 19/658,447 · Filed April 24, 2026 · Docket SEENINTL-001-NP
Coverage: 20 claims — biometric fusion, blockchain identity, compliance routing
PCT Deadline: April 5, 2027
Sub-processors
- Railway (application hosting)
- Cloudflare (DNS and edge routing)
- Lemon Squeezy (payments)
- Resend (email)
- Supabase/PostgreSQL (data storage)
- Zoho (business operations)
DPA and privacy
Incident response
72-hour GDPR breach notification target where applicable. Current target RTO 4h / RPO 1h for production incidents.
Vulnerability disclosure
See security.txt and Security policy.
Accessibility
See Accessibility statement for WCAG 2.2 AA commitment and known limitations.
Procurement FAQ
Current procurement responses, attestation timelines, and engagement targets are published at /procurement-faq.html.
This page is updated with concrete dates as engagements are contracted and scoped.
Audit reports and NDA process
Control narratives, architecture dossiers, and assurance evidence are available to qualified enterprise buyers under NDA via enterprise procurement workflows.
Submit requests via POST /api/trust/nda-request; an acknowledgment and next-step NDA flow are sent by email.
Annual transparency report: /trust/transparency/2026.html
Last updated: 2026-04-24