Security overview
Clear product information for businesses evaluating digital waiver and e-signature workflows.
Security model
Verifyistic separates the public marketing site, authenticated dashboard, API, asynchronous worker, and private document storage. Business records are tenant-scoped and sensitive document downloads use authorized short-lived access.
Evidence integrity
Signing workflows preserve the exact template version, capture audit events, and generate hash-linked proof artifacts. Completed legal artifacts are treated as immutable records.
Access controls
API keys are scoped, stored as hashes, and can be restricted to sites. Webhook secrets are encrypted at rest and delivery uses signed requests with replay protection.
Responsible disclosure
Contact jolly@wordpressistic.com with a concise description and safe reproduction details. Do not include live customer records or credentials.