Evidence Vault Data Statement

Last updated: May 2026

The customer evidence vault lets active subscribers upload compliance files (photos, PDFs, certificates, audit evidence) separate from the standard document library templates.

What we store

• Files you upload and metadata (filename, size, upload time, optional notes)
• Association with your user account and subscription

Where it is stored

Files are held with our managed cloud storage provider (Supabase) and encrypted in transit. Access is enforced with per-account row-level security, so only your account can access your files.

Who can access

• You — via the authenticated dashboard evidence vault
• Veridian support — only when you request assistance and authorise access
• Sub-processors — Supabase and Vercel under infrastructure agreements; they do not use your files for their own purposes

Retention & deletion

Evidence is retained while your subscription is active. After cancellation, files may be deleted after a grace period unless you export them first or request extended retention in writing. Contact hello@veridianims.com to request deletion.

Security

Uploads require authenticated sessions. Storage paths are scoped per user. We recommend not uploading information you are not authorised to share and avoiding unnecessary personal data in filenames.

Related policies

See also our Privacy Policy and Terms of Service.