Tenant isolation by design
Every organization's data is scoped at the database level, not just in application code - one customer's records are never reachable through another customer's session.
SECURITY & COMPLIANCE
What Verifiqa actually does - not what we claim.
Verifiqa helps you document your work and keep proof of it. This is not a legal guarantee that your organization is regulatorily compliant - that's for you and your own counsel to determine. Here's what's actually in place, technically and operationally.
Immutable submitted records
Once a form is submitted, its content is locked. Anything that happens afterward - notes, evidence, status changes - is appended to the record, never edited into it.
Role-based permissions
Access is controlled by role and permission, down to individual actions like assigning work, approving corrective actions, or managing billing.
Security event logging
Denied access attempts - a user reaching for an organization or permission they don't have - are logged, not just silently rejected.
Rate-limited public surfaces
Unauthenticated endpoints (a scanned asset or shipment QR code, an external work-order link) are rate-limited independently of the rest of the API.
Dependency & vulnerability scanning
Automated scanning runs on every change, and dependency updates are tracked continuously rather than discovered during an incident.
Quebec-oriented, Canada-ready
Built with Law 25 in mind.
Verifiqa is built by a Quebec-based team for bilingual organizations. Our privacy policy details what information is collected, which providers are involved, how long it's kept, and your rights, including with Quebec's Commission d'accès à l'information.