Evidence Vault Data Statement
Last updated: May 2026
The customer evidence vault lets active subscribers upload compliance files (photos, PDFs, certificates, audit evidence) separate from the standard document library templates.
What we store
- Files you upload and metadata (filename, size, upload time, optional notes)
- Association with your user account and subscription
Where it is stored
Files are held with our managed cloud storage provider (Supabase) and encrypted in transit. Access is enforced with per-account row-level security, so only your account can access your files.
Who can access
- You — via the authenticated dashboard evidence vault
- Veridian support — only when you request assistance and authorise access
- Sub-processors — Supabase and Vercel under infrastructure agreements; they do not use your files for their own purposes
Retention & deletion
Evidence is retained while your subscription is active. After cancellation, files may be deleted after a grace period unless you export them first or request extended retention in writing. Contact hello@veridianims.com to request deletion.
Security
Uploads require authenticated sessions. Storage paths are scoped per user. We recommend not uploading information you are not authorised to share and avoiding unnecessary personal data in filenames.
Related policies
See also our Security & data handling, Privacy Policy and Terms of Service.