VERINEX
00 / SECURITY & TRUST

Conservatively

described.
Structurally enforced.

Verinex does not claim external certifications it has not obtained. What follows is a factual account of security controls operational in the platform today.

Responsible disclosureGOVERNANCE MODEL
● CONTROLS MATRIX · LIVESCHEMATIC
01
ACC
02
AUT
03
RBP
04
AUD
05
EVD
06
SDL
07
VUL
08
IR
09
CR
STATUS
OPERATIONAL
EXTERNAL AUDIT
NOT CLAIMED
CONTROL SET · 9 / 9CENTRE · EVIDENCE INTEGRITY
● OPERATING CONTROLSACCESS · PRIVATE APPROVED|LEDGER · APPEND-ONLY|DISCLOSURE · COORDINATED|
01 / OPERATING CONTROLS

Controls stated
without embellishment.

  1. 01Private approved accessThe platform is not open registration. Access is granted under agreement.ACC
  2. 02AuthenticationConsole access is authenticated; sessions are scoped and revocable.AUT
  3. 03Role-based permissionsActions are bounded by role; escalation is explicit and audited.RBP
  4. 04AuditabilityEvery material action is inspectable in an append-only ledger.AUD
  5. 05Evidence integrityArtefacts are content-addressed; certificates are signed; provenance is preserved.EVD
  6. 06Secure developmentChange control, review and dependency scrutiny apply to platform code.SDL
  7. 07Vulnerability handlingCoordinated disclosure with defined triage, containment and remediation.VUL
  8. 08Incident responseDocumented runbook: contain, verify, disclose, remediate, retain evidence.IR
  9. 09Customer responsibilitiesAccess hygiene, credential management and use within stated boundaries.CR
02 / EXPLICITLY NOT CLAIMED

No unearned
certifications.

Where such assurances are obtained, they will be stated with issuing body, scope and current status. Until then, they are absent from this page by design.

STATED STATUS · ABSENT
  • ISO 27001— NOT CLAIMED
  • SOC 2— NOT CLAIMED
  • External penetration certification— NOT CLAIMED
  • Guaranteed security— NOT CLAIMED
03 / RESPONSIBLE DISCLOSURE
COORDINATED · NOT ADVERSARIAL

Suspected vulnerabilities
are received in good faith.

We accept coordinated disclosure with defined triage, containment and remediation timelines. The full policy — including scope, safe-harbour conditions and contact route — is published in the Legal Centre.

RESPONSIBLE DISCLOSURE POLICYLEGAL SECURITY STATEMENT
RUNBOOK · INCIDENT RESPONSE
  1. 01CONTAIN
  2. 02VERIFY
  3. 03DISCLOSE
  4. 04REMEDIATE
  5. 05RETAIN EVIDENCE

Governance and security
operate together.

Security controls describe what the system enforces; governance describes who may act, on what evidence, under whose authority.

Governance modelContact