Trust
Your records stay yours, including from us
An agency puts tenants' details, landlords' files and statutory certificates into Verixad. That deserves better than a padlock icon and a promise, so here is exactly how it works, in plain English and with the uncomfortable parts included.
Every organisation is separated at the database itself
Separation between customers is enforced by the database on every single query, uploaded files included, rather than by anything on our screens. We attack-test it: our own red-team exercises try to read and write across organisations under real user accounts, and the record of those tests is part of how the product is built.
Our staff cannot browse your data
This is the part most software gets wrong. Verixad’s own operators see account information (plan, usage, billing state) and not your documents, messages or people. If support ever needs a deeper look, you grant it from your own settings. The grant is scoped, lasts 30 days at most, carries your reason on the record and can be revoked at any moment. Every grant, past and present, stays listed where you can see it.
Your team sees what you decide
Roles and granular permissions are enforced at the database rather than painted on the interface, so what a colleague cannot open, they cannot reach by any other route either. Two-factor sign-in is available to everyone on every plan.
AI suggests, a person confirms
Document reading produces suggestions with their confidence shown, and a person confirms before anything becomes a record. If the right property isn’t certain, Verixad asks rather than guesses. Nothing AI produces is ever presented as a legal conclusion.
The honest details on leaving, deleting and data requests
Export: you can download a complete copy of your organisation’s records from your own settings at any time. It is built in your browser, so there is no request queue and no waiting on us.
Deletion has a stated window, and it’s real: records you delete are restorable by you for 60 days and then permanently removed, files included. Deleting your whole organisation is a seven-day scheduled process that the entire team can see and any owner can cancel. When it runs, every record and every file goes, and we keep only the bare fact that the deletion happened.
Data-subject requests: if a tenant or landlord asks you what’s held about them, the export contains it and every person’s page shows their records in one place. If you need help assembling a response, contact us. Helping with a DSAR is ordinary support work rather than a favour.
Where things run: service data is hosted in the European Union. The full processor terms, including the list of sub-processors, are in the Data Processing Agreement.
What we never hold: card numbers (our payment provider holds those), bank credentials, or client money of any kind. The rent features track and report, and money never passes through us.
Questions we haven’t answered here?
For security questionnaires, DPA countersigning, or anything else your compliance process needs, ask us directly. You’ll get a straight answer, including “we don’t do that yet” when that’s the truth.