Security & trust

Care records protected by design โ€” not by policy alone.

Security in Verio is enforced in the code: who can do what, how people sign in, how documents are stored and shared, and how every change is recorded. Here is what is built in today.

Access

Roles, capabilities and two-step sign-in

Every page and action checks a capability. Roles are managed from the Roles & Permissions page, and each portal โ€” office, carer, family, client โ€” only opens for the right kind of account.

  • Capability checks on every page and API
  • Two-step verification by email or authenticator app
  • Single-use, 30-minute password reset links
  • Family access tied to recorded sharing decisions
Documents & sharing

Protected stores and expiring links

Uploaded documents live outside public access and are streamed only through authenticated endpoints. When something must be shared outside Verio, it goes by a random, time-limited link that is logged and can be revoked.

  • Referral, client, staff and evidence stores denied to the web
  • Only the hash of a share token is stored
  • Watermarks and access logs on evidence packs
  • Photos stripped of location and other metadata
Your environment

Tenant controls and a governed release

Your organisation's brand, footer, sender rules and module entitlements are versioned and released through draft, validate, review, UAT and production โ€” with rollback, isolation tests and a register of any support access.

  • UAT and training environments with banners and watermarks
  • Switched-off modules return "forbidden" at the server
  • Isolation tests and restore drills recorded
  • Break-glass access logged and reviewed
Evidence you can check

Records that can prove they were not changed

Audit

Append-only chronology

Medicines, night shifts and emergency sessions keep append-only, hash-chained event logs.

Corrections

Linked, never overwritten

Mistakes are corrected with a linked entry so the original stays visible.

AI

Every output on record

AI suggestions store the model, prompt template, evidence and the human decision.

FAQs

Common questions

Where is our data hosted?

Ask us during your demo and we will confirm the hosting location, backup arrangements and sub-processors in writing for your contract.

Do you hold certifications such as Cyber Essentials or ISO 27001?

We will tell you exactly which certifications are in place when you speak to us โ€” we do not list a certification on this site until it has been awarded.

Can our team sign in with two-step verification?

Yes. Each user can turn on email or authenticator-app verification for their own account, on the website and in the mobile app.

Connected to

Works with the rest of Verio

Have a security questionnaire?

Send it over โ€” we'll answer it with what is actually built.

Book a demoAll features