Privacy Policy

To issue certificates and operate our service, we collect:

• Information you provide: company name, address, industry, scope of operations, chosen ISO standard(s), full name, email address, phone number, and any other details you enter into the certification flow.
• Verification data: your electronic signature on the declaration, email verification (one-time code), and the reference number of any certificate we issue to you.
• Technical data: IP address, approximate region derived from IP, device and browser information, referral source, UTM parameters, and timestamps of your activity on the site.
• Communications: messages you send us and our responses.

• To issue, verify, and manage your certificate(s).
• To communicate with you about your certificate, account, and requests.
• To operate, secure, and improve our services.
• To detect and prevent fraud or misuse of certificates.
• To comply with legal obligations.

We do not sell your personal information. We do not use your data for third-party advertising.

Verisaf issues three types of certificates, with different public visibility:

• Provisional certificate: self-declared, issued instantly after you complete the intake and sign the declaration. Valid for 7 days. Not accredited.
• Issued certificate: reviewed and issued by Verisaf.
• Accredited certificate: independently reviewed and issued under our accreditation processes.

When we issue a certificate, we make limited information publicly available at our verification page so anyone with your reference number can confirm the certificate: company name, standard(s), scope, country and city, reference number, and issue date. We do not expose your email address, phone number, or other private data via verification.

Where applicable law (such as GDPR) requires a legal basis, we rely on:

• Performance of a contract — to provide the certification service you request.
• Legitimate interests — to secure, improve, and operate our service and to prevent misuse.
• Legal obligation — where required by law.
• Consent — where you have given it (for example, optional communications).

We share personal information only with:

• Service providers that operate our infrastructure (hosting, database, transactional email delivery) under confidentiality obligations.
• Regulators, accreditation bodies, or authorities where required by law.
• Successors in interest in the event of a merger, acquisition, or reorganization.

We use only strictly necessary cookies and local storage required to run the certification flow (for example, to preserve your progress between steps and keep you signed in). We do not currently use third-party advertising, marketing, or cross-site tracking cookies. If this changes, we will update this page and, where required, ask for your consent before setting any non-essential cookies.

We retain your information for as long as your certificate is active and thereafter for a reasonable period consistent with our legal, accounting, and audit obligations. You can request deletion of your data by contacting us; where a certificate has been issued, some records may need to be retained to preserve the integrity of the verification record.

Depending on where you live, you may have rights to access, correct, delete, export, or restrict the processing of your personal information, and to object to certain processing. To exercise these rights, contact us at the address below. We will respond within the timeframes required by applicable law.

We use industry-standard measures — encryption in transit, restricted access controls, and secure infrastructure — to protect your information. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security.

Our infrastructure may process data outside your country of residence. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers.

Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. The “Effective” date at the top reflects the latest version. Material changes will be announced on the site.

Questions or privacy requests: hello@verisaf.com.

Verisaf LLC. This document is a baseline template and does not constitute legal advice. Please have counsel review before reliance on it in production.