Security

Privacy and Security Statement

At Verify, we are dedicated to providing secure products and services that meet your compliance and reporting needs. We share extensive information on best practices and offer easy access to our compliance documentation. Verify’s security measures, third-party certifications, documentation, and legal commitments help support your compliance efforts. Our services undergo regular independent verification of their security, privacy, and compliance controls, obtaining certifications and attestations of compliance. Additionally, we have created resource documents and mappings for certain frameworks where formal certifications or attestations may not be required or applied. We are continually working to expand our compliance coverage. Verify evaluates available guidance from leading standards and regulatory bodies, adjusting our security and privacy programs as the compliance landscape evolves. We carefully tailor programs by region and industry to ensure customers can leverage our compliance resources to make informed decisions for their business.

Regulatory Compliance

Our customers operate in regulated industries, including finance, government, healthcare, and education. Verify provides products and services in a manner that enables our customers to comply with numerous industry-specific requirements.

Independent Third-Party Certifications and Attestations

 Our customers and regulators expect independent verification of security, privacy, and compliance controls. Verify utilizes trusted third-party services of Google Cloud that undergo various independent audits regularly to provide this assurance. Some of the key international standards against which our third-party services are audited include:

• ISO/IEC 27001 (Information Security Management)
• ISO/IEC 27017 (Cloud Security)
• ISO/IEC 27018 (Cloud Privacy)
• ISO/IEC 27701 (Privacy)
• SOC 2 and SOC 3 reports

For more information: https://cloud.google.com/security/products/security-command-center?

We also provide resources and mappings for certain frameworks where formal certifications or attestations may not be required or applied. For a complete list of our compliance offerings, please email: compliancy@joinverify.com