Our Principles

Veriti is built on the principle that schools should retain full control over their data while benefiting from secure, reliable and transparent cloud software. We design our platform with security, privacy and operational resilience as foundational requirements rather than optional features. Our Trust Center provides visibility into our practices, governance and ongoing commitment to protecting the information entrusted to us.

Enterprise customers should be able to rely on clear, non-technical commitments about how Veriti treats school information:

• We never sell customer data.
• Schools retain ownership of all data entered into Veriti.
• Veriti never claims ownership of customer data.
• Customer data is never used to train AI models.
• We only process data necessary to provide the agreed service.
• Customers may export their data through authorised administrator capabilities and supported offboarding processes.
• Customers may request deletion upon termination, subject to contractual and lawful retention requirements.
• Access to production customer data is restricted to authorised personnel when required to provide support or maintain the service.

Security considerations are incorporated throughout product design, implementation, testing and deployment. New functionality is reviewed for security implications before release.

Security vulnerabilities can be reported confidentially to operations@codeweave.io with the subject line “Security vulnerability”. We ask researchers not to publicly disclose issues until we have had a reasonable opportunity to investigate and remediate.

Where appropriate, Veriti provides customers with documentation regarding security controls, architecture summaries and operational practices under appropriate confidentiality arrangements.

Security questionnaires, architecture summaries and supporting documentation are available during active procurement processes. Deeper evidence may be shared under NDA where appropriate.

Veriti aligns its privacy practices with the principles of POPIA and continually improves operational controls as the platform matures. We are not presenting this Trust Center as a formal certification; it describes how we operate and the principles that guide us.