Security

VerifyGrid is a public, key-based platform. Security is centered on API keys, the data you submit for validation, and the integrity of your credit balance.

Transport

All API and dashboard traffic is encrypted in transit over HTTPS/TLS. We reject plaintext requests.

API keys

Keys are the credential for API calls. We display full key values in the dashboard so you can copy them into your application. Treat keys as secrets: store them in a secrets manager, never commit them to source control, and use separate keys per environment. Revoke and rotate any key that may be exposed.

Accounts and sign-in

Dashboard sign-in is handled by our hosting platform, Base44, with email and password or Google, Microsoft, Facebook, or Apple sign-in. Passwords are stored hashed by the platform and never reach our code. Each account can only see and manage its own keys, credits, and activity. API calls don’t use your account login: they are authorized by an active API key, so anyone holding a key can spend its credits.

Payments

Billing is handled by Stripe. We never see or store your card details — Stripe processes and vaults them.

Data

• Activity logs store only masked values; full submitted values are not kept after the lookup
• Submitted values go only to the lookup provider for that check (see the Privacy Policy)
• We do not run third-party advertising trackers on the app

Responsible disclosure

Found a security issue? Report it via the Contact page with the topic set to “security”. We appreciate responsible disclosure and will respond promptly.