1. Access and responsibility
This public website explains Verdanox and provides enquiry and assessment journeys. Customer sign-in takes place at the separate Verdanox application. The public product examples use fictional records and do not provide access to customer workspaces.
The customer agreement defines responsibilities for authorised users and customer content. Discuss your identity, role-access and review requirements with us as part of the service scope. A reference to a control framework in an agreement is not evidence of an independent certification.
2. Handling information
Walkthrough enquiries collect contact details and the context you choose to provide. The public Exposure Scorecard processes its answers and contact information to generate and send the requested report. See the privacy notice for the purposes and recipients of that information.
The website applies server-side validation to its forms. The walkthrough handler also checks request origin and uses anti-abuse controls. Delivery credentials are used on the server. These website controls do not establish every security property of the separate customer platform.
Please use public or illustrative examples in the enquiry form. Do not include unnecessary sensitive information or confidential supplier files. We can discuss an appropriate process for exchanging procurement or customer information.
3. Suppliers and procurement information
The public website uses hosting services, Resend for form and report email delivery, Supabase for assessment storage and optional Google Analytics for consented website measurement. The privacy notice distinguishes these website uses from processing under a customer agreement.
For a procurement review, tell us which service, information and requirements are in scope. Request the relevant supplier information, data-processing terms and available security documentation through our existing contact below. Hosting locations, contractual transfer arrangements and service commitments should be considered in that review.
We do not present this page as evidence of SOC 2, ISO 27001 or another independent certification. Any contractual security commitments remain those in the applicable agreement.
4. Security enquiries
Discuss your security requirements with advisory@verdanox.com. Include your organisation, service of interest and a concise description of the documentation you need.
To report a security concern, describe the affected public page or service and how we can contact you. Avoid sending secrets or other people’s personal information in your initial message.
Read the Terms and Conditions for the existing contractual responsibilities and the privacy notice for personal information handling.