Security
What we do to protect your account and content, and what we can't promise.
Accounts and access
Saved reports are private to your account and protected by database access rules. Share links use unguessable tokens and can be turned off from My reports. Attachments are served only through links that expire after 15 minutes.
Keys and providers
Search and AI provider keys stay on our servers and are never sent to your browser. Usage limits are enforced on the server, not in the browser.
Browser-only processing
Voice input and image text recognition (OCR) run in your browser; audio and images are not uploaded to our servers for those features.
Limits
No internet service is completely secure, and we have not completed an independent security audit. Do not submit confidential, regulated, unpublished or personally identifiable material. See the Privacy Policy.
Report a vulnerability
Email hello@verfiai.app with the subject “Security report”. Please give us reasonable time to fix an issue before disclosing it.