Security & Compliance

Security and privacy are built into Vericoo from the ground up. This page explains, in plain language, how your data is protected, who can see it, and the control you have over it. For the full legal detail, see our Privacy Policy.

You control what you share

Your Vericoo card only ever shows what you choose to add. Sensitive fields — blood type, allergies, medications, and medical conditions — are optional. You decide what goes on your card, what's publicly visible, and you can edit or remove any field at any time.

How your data is protected

• In transit: all traffic is encrypted with HTTPS/TLS.
• Stored securely: your data is held in access-controlled databases on reputable cloud infrastructure.
• Credentials are never stored in plain text: passwords, section PINs, and two-factor backup codes are cryptographically hashed.
• Extra account security: two-factor authentication (2FA) is available for account holders.
• Sensitive sections can be locked: certain sections (such as insurance) can be protected behind a PIN you set.

Who can see your card

• Anyone who scans your QR code sees only the fields you've marked visible — no login required.
• Hidden fields are never shown on a scan; PIN-protected sections open only with the correct PIN.
• Issuing organisations can see the cards they issued; Vericoo staff access data only for security, legal, or support reasons.

Every scan is logged

When your card is scanned we record the date, time, approximate location, and device, so there's a timestamped record if one is ever needed. Scans are anonymous — we don't identify who scanned your card.

AI-assisted features, used transparently

Some optional features use a third-party AI provider to generate a short first-responder summary or to translate card content. This runs only when your issuing organisation enables it, the provider processes the data solely to return the result, and your data is never used to train AI models. See our Privacy Policy for details.

Working with partners

We work directly with our partners' legal and compliance teams to meet the specific requirements of their programs. For a security or compliance question, contact us at [email protected].

Reporting a security issue

If you believe you've found a security vulnerability, please email [email protected] so we can investigate. We appreciate responsible disclosure.

Your choices

You can access, correct, export, or delete your data at any time — see our Privacy Policy, or email [email protected].