Tenant-scoped records
Business records carry an organization ID and cross-tenant identifiers are rejected by scoped server queries.
Trust is an operating requirement
Operational data you can trust.
VeriLocus treats location, access, credentials, and change history as security boundaries—not interface preferences.
Verified boundariesIdentity · Tenant · Role · Record
Security architecture
Controls where the decision happens.
Browser affordances make the product clear. Server validation, scoped records, cryptography, and durable evidence make it safe.
Server-enforced capabilities
Roles shape the interface, while API routes independently validate membership and permission for every operation.
Protected credentials
Provider tokens and secrets are encrypted with AES-256-GCM before storage and never returned to browser code.
Revocable sessions
OAuth sessions use secure, HTTP-only cookies backed by durable database records and server-side validation.
Operational evidence
Location observations, assignments, provider events, and user changes retain source, actor, and timestamp.
Verified event intake
Signed webhook bodies, replay windows, tenant links, and idempotency checks protect provider ingestion.
Bounded reliability
Cursor checkpoints, retry budgets, leases, and stale-state handling prevent silent or unordered updates.
Location authority
Provider-linked actual positions cannot be overwritten by a manual drag or planned assignment.
Clear claims
Built for a real security review.
VeriLocus documents the controls it operates today and avoids claiming certifications or capabilities that have not been independently established. Public-site visit alerts use a short-lived first-party session signal without fingerprinting or precise location.
Least-privilege provider accessSeparate actual and planned stateCredentials remain server-sideEvery organization is independently scoped
Ready when you are
Give the team access without giving up control.
Use verified identity, tenant membership, role capabilities, and an accountable record behind every operational change.