Security
We believe all businesses have potential to do amazing things. Our mission is to unleash the potential in every business of every size and industry, and in turn, help advance these businesses through the power of software.
We know that your mission is as important to you as our mission is to us, and information is at the heart of all our businesses and lives. This is why customer trust is at the center of what we do and why security is our top priority. We’re transparent with our security program so you can feel informed and safe using our products and services.
The information on this page applies to Verified core services, Smart Flows and APIs unless otherwise noted.
Data Encryption
We protect your data with encryption in transit with TLS v1.3. We also support TLS v1.2 in case needed. We encrypt your data with AES 256 at rest.
Data Processors
We continuously look for ways to improve product and platform performance by monitoring key performance metrics, such as load times, search responsiveness, and attachments.
Below are the subcontractors that Verified (service provider) can use for processing the customer’s information with our platform and internally for administration of the service. The list is kept up to date by the service provider in order to correctly reflect relevant subcontractors. If the service provider intends to change, remove, or add subcontractors for the processing of the customer’s information, the customer must be notified in advance. Before the service provider begins collaboration with a new assistant, the customer will be informed in good time before the collaboration begins. The list contains all our subcontractors for all our markets.
It is not necessary nor probable that a customer uses all of these when using our services. Subcontractors referred to as “Lookup services” are options that customers can make.
| Amazon Web Services Description and relevant certification Hosting of our platform for our operational services & storage, Transactional e-mail services and backend services for hosting static websites/forms. ISO/IEC 27001:2013, SOCI-III, PCI DSS and more See https://aws.amazon.com/compliance/programs/ Company ID and address Org no: 516411-0669 Kungsgatan 49, 111 22 Stockholm, Sverige Processing customers data Yes Region EU* |
AML Watcher Description and relevant certification Lookup services supporting AML and KYC compliance. Data Privacy Framework. Company ID and address 8 The Green #16077 Dover, DE 19901, United States Processing customers data If customer select to use the service Region EU |
Bronnoysundregistrene Description and relevant certification Lookup services Company ID and address 974 760 673, Brønnøysundregistera, Postboks 900, 8910 Brønnøysund Processing customers data Yes Region EU |
| Datadog Description and relevant certification Use logdata for Observability, monitoring and security purposes. Read more: https://trust.datadoghq.com/. Company ID and address Datadog, Inc. 620 8th Ave 45th Floor, New York, NY 10018 USA https://trust.datadoghq.com/ Region EU/EEA |
Dun & Bradstreet Description and relevant certification Lookup services Company ID and address Org no: 556341-5685, Rosenborgsgatan 4-6, Solna, Sweden Processing customers data Yes, from Dec 27, 2023 Region EU |
EID Easy OÜ Description and relevant certification Signing, authentication Company ID and address 14080014, Telliskivi tn 60/1, Tallinn, Estonia, 10412 Processing customers data If customer uses the service Region EU |
| Finansiell ID-Teknik BID AB Description and relevant certification Signing, authentication Company ID and address 14080014, Telliskivi tn 60/1, Tallinn, Estonia, 10412 Processing customers data If customer uses the service Region EU |
Google Ireland Limited Description and relevant certification Storage of files that enables the customer to maintain the text and its translations to different languages that are used if the service “smart forms” is used. Company ID and address ISO/IEC 27001:2013, SOC 2, CSA STAR and more: https://cloud.google.com/security IEno 6388047V, Gordon House, Barrow Street, Dublin 4 Processing customers data If customer uses the service Region EU if customer select to use the service |
HubSpot Ireland Ltd Description and relevant certification Tool for our customer onboarding, support and case management.Contains information provided by the customer and Verified staff if the service is used.ISO/IEC 27001, SOC 2 and more. For certifications see their trust center. Company ID and address Ground Floor, Two Dockland Central,Guild Street, Dublin 1, Co. Dublin, IrelandVAT IE9849471F Processing customers data If customer uses the service Region EU |
| Kund-O AB Description and relevant certification Tool for our customer support services and ticket application. Contains information provided by the customer and support staff about service. From 2026-06-09. Company ID and address Kundo (Kund-O AB, 556812-7004) Magnus Ladulåsgatan 10, 118 66 Stockholm Processing customers data If customer select to use the service Region EU |
Kurrent Inc Description and relevant certification Managed services for databases Company ID and address Kurrent Inc (EIN 82-2628657, DUNS 11-736-6212) 1 Sansome St. Ste 3500, #10043, San Francisco, CA 94104 Processing customers data If customer select to use the service Region EU |
MongoDB Limited Description and relevant certification Storage of process data generated and could be used during usage of some of our services as custom flows and AML. Company ID and address ISO/IEC 27001:2013, SOC 2, PCI DSS and more: Number One Ballsbridge, Ballsbridge, Dublin 4, Ireland Region EU if customer select to use the service |
| Nets AS Description and relevant certification Signing, authentication, payments, lookup services. SOC 2. Company ID and address 37427497, Klausdalsbrovej 601, DK-2750 Ballerup, Denmark Processing customers data If customer select to use the service. Region EU |
Plisec AB Description and relevant certification Lookup services supporting AML and KYC compliance Company ID and address 559161-4275, Gårdsvägen 10b, 16970 Solna, Sweden Processing customers data If customer uses the service Region EU |
Tagd AB Description and relevant certification Operational services for contract management. Company ID and address 559364-3058. Skogsfrugränd 1, 16762 Bromma, Sweden Processing customers data If customer select to use the service. Region EU |
| Tietoevry Norway AS / T-rank AS Description and relevant certification UBO (Ultimate Beneficial Owner data) and owner map. Company ID and address Tietoevry Norway AS, Snarøyveien 30, P.O.Box 4 NO-1360 Fornebu, Norway Corporate ID: 933 012 867 (Norwegian) Processing customers data If customer select to use the service Region EU |
Trapets AB Description and relevant certification Signing, authentication, payments, lookup services Company ID and address Org no: 556586-4773, Kungsgatan 56, 111 22 Stockholm, Sweden Processing customers data If customer select to use the service Region EU |
Trust Services ApS Description and relevant certification Offer eID (MitID in Denmark) Company ID and address C/O IN Groupe Denmark A/STeknikerbyen 5, 2.Søllerød2830 Virum Processing customers data If customer select to use the service Region EU |
| Stø AS Description and relevant certification Signing, authentication, lookup services Company ID and address 918 713 867 Postboks 9236 Grønland, 0134Oslo Processing customers data If customer select to use the service Region EU |
Valuation Europe AB Description and relevant certification Lookup services Company ID and address Org nr: 556662-7914. Valuation Europe AB, Danderydsgatan 18, SE-114 26 Stockholm Processing customers data If customer select to use the service Region EU |
Zendesk, Inc. Description and relevant certification Tool for our customer support services and ticket application. Contains information provided by the customer and support staff about the service. ISO 27001:18, AICPA, SOCII etc. See: https://www.zendesk.com/product/zendesk-security/ Company ID and address EIN no: 26-4411091, SEC CIK #0001463172, 989 Market St, San Francisco, CA 94103 Processing customers data If customer select to use the service Region EU |
Availability and Continuity
We maintain high levels of availability with multiple redundant AWS data centers in Sweden and robust Disaster Recovery and Business Continuity programs. Key security offerings:
Data encryption in transit
Data encryption at rest
SSO with multiple authentication schemes (OIDC and SAML)
Cloud Product Security
Security is built into the fabric of our cloud products. We employ numerous controls to safeguard your data including encryption in transit and at rest across our cloud services, external vulnerability research such as our continuous penetration test program, and more.
Platform and Network Security
We perform rigorous security testing including threat-modeling, automated scanning, and third-party audits. If an incident occurs, we resolve the issue quickly using our security incident response practices, following the ITIL framework, and keep you informed with real-time system status on status.verified.eu
Security Operations and Best Practicess
Our dedicated security team approaches security holistically with a common controls framework. Security threats are prevented using our Verified Trust Management System (VTMS), secure software development practices, and industry-accepted operational practices.