Security and Trust
Mill test reports tie directly to your supply chain and your compliance record.
This page explains where your documents go, who can see them, and how every result is made and kept.
How your MTR is processed
- Upload: the PDF travels over TLS 1.2 or 1.3 to the Vericord Portal.
- Extraction: commercial AI models read the reported values.
- Validation: deterministic rules built by materials subject matter experts (SMEs) from the code books make every pass or fail.
- Record: once saved, results are locked with the original MTR preserved.
The model reads; it never rules.
How your data is used
- MTRs are never used to train AI models, by Vericord or its AI providers.
- AI providers do not retain customer documents.
- MTRs go to AI providers solely to extract data.
- Vericord uses only de-identified, aggregated statistics, such as failure rates by specification, to benchmark and improve the service.
Where your data lives
- The Vericord environment is hosted at TRG Datacenters, Houston.
- All processing and storage are in the United States.
- Data is encrypted with AES-256 at rest and TLS 1.2 or 1.3 in transit.
- Card details go to Stripe and never reach Vericord.
Access and audit
- Organization Admin, User, and Viewer roles control access, and Viewers see only the folders shared with them.
- Admins can require two-factor authentication for the whole organization.
- Saved records are locked, and each report carries a change log and a field-level audit log.
SOC 2 report
Vericord is covered by a SOC 2 report, available under NDA.
To request the SOC 2 report, email [email protected].
Retention
- Records are kept while your account is active and can be deleted on an Admin’s written request.
- All customer data is deleted 90 days after the account closes.
- Breach notification is made without undue delay.