Security
Security from the first line of code.
Verdia is built the way banks are expected to build: reviewed changes, defence in depth and systems designed to be inspected, long before there is a licence to show for it.
How we protect what you show us.
BankID sign-in
Every session starts with Swedish BankID. There are no passwords to leak, and a session that sits idle ends on its own.
- No passwords
- Sessions that idle out
- An identity, not an email address
Your data stays in the EU
Data is stored on servers in the EU under GDPR and kept only as long as it is needed. You can ask what we hold, and have it corrected or deleted.
- Stored in the EU
- Never sold
- Deleted when you ask
Tokens you control
An agent reads through a personal access token you create. We store only its hash; it carries the scopes you chose, expires on its own and stops the moment you revoke it.
- Only a hash is stored
- Scopes you choose
- Revoked in one click
Engineering you can inspect
Every change is reviewed and tested before it ships, every page carries a strict content security policy, and every sensitive action is written to an audit log.
- Reviewed and tested changes
- A strict content security policy
- An audit log
Where the licence stands.
Verdia is not yet a licensed credit institution. A banking licence application is in preparation, and banking services will be offered only after authorisation. Until then, everything here is read-only.
Early access
Be among the first.
Leave your email and we will write when the platform opens up, in order of request. Or try the demo now, on a fictional company.