Trust

Your records stay yours, including from us

An agency puts tenants' details, landlords' files and statutory certificates into Verixad. That deserves better than a padlock icon and a promise, so here is exactly how it works, in plain English and with the uncomfortable parts included.

Every agency's records are kept apart

Each agency works in its own separate workspace, uploaded files included, checked on every request rather than only on the screens you see. We test it by attacking it: our own red team exercises try to read and write across organisations under real user accounts, and the record of those tests is part of how the product is built.

You decide what our staff can see

This is the part most software gets wrong. Verixad’s own operators see account information (plan, usage, billing state, your team’s sign in times) and not your documents, messages or people. If support ever needs to look at your records, or to make a fix you ask for, you grant it from your own settings. The grant is scoped, lasts 30 days at most, carries your reason on the record and can be revoked at any moment. Every grant, past and present, stays listed where you can see it. One person, who runs Verixad, can also reach the underlying systems directly; that access is protected by two factor sign in and used only to keep the service running, repair it or restore it, investigate a security issue, or comply with the law.

Your team sees what you decide

Roles and permissions are checked on every request, not only on the screens, so what a colleague is not allowed to open stays closed to them by every route. Two factor sign in is available to everyone on every plan.

AI suggests, a person confirms

Document reading produces suggestions with their confidence shown, and a person confirms before anything becomes a record. If the right property isn’t certain, Verixad asks rather than guesses. Nothing AI produces is ever presented as a legal conclusion.

The details

The honest details on leaving, deleting and data requests

Export: You can download your organisation’s records from your own settings at any time, as one JSON file. It is built in your browser, so there is no request queue and no waiting on us. Document files download together as one ZIP file.
Deletion has a stated window, and it’s real: Records you delete are restorable by you for 60 days and then permanently removed, files included. Deleting your whole organisation is scheduled seven days ahead, where the entire team can see it and any owner can cancel it. When it runs, every record and every file in the organisation goes. We keep a note that the deletion happened and the billing records the law requires, and each person keeps their own login, because it may belong to another organisation too. The Privacy Policy sets out every retention period.
Data subject requests: If a tenant or landlord asks you what’s held about them, the export contains it and every person’s page shows their records in one place. If you need help assembling a response, contact us. Helping with a DSAR is ordinary support work rather than a favour.
Where things run: Service data is stored in the European Union. A few services we rely on, such as email delivery and the AI features, process only what they need outside it, under contractual safeguards. The full processor terms, including the list of subprocessors, are in the Data Processing Agreement.
Card details and client money: Card numbers stay with our payment provider. Bank credentials and client money stay with you: the rent features track and report what is due and paid, and the money moves between your own accounts as it does today.

Questions we haven’t answered here?

For security questionnaires, DPA countersigning, or anything else your compliance process needs, ask us directly. You’ll get a straight answer, including “we don’t do that yet” when that’s the truth.