Security and trust

Your school's records belong to your school

What Veramast promises, in plain words, for the superintendent, the board, and the district's IT reviewer.

  • No search across schools
  • Every look logged
  • Nothing sold, ever

Our commitments

Seven promises, at every school

Each holds from the first day, for every school on Veramast, and none depends on a setting someone has to remember.

Test School

KTW2081MRV2604CJH1187

Another school

Your records are yours

Your school owns its records, and they are kept apart from every other customer's. No other school can see them.

  1. 8:02 amJ. Rivera opened a full-size photo
  2. 7:44 amM. Chen started live view, North gate
  3. 7:30 amJ. Rivera exported yesterday's gate log

Cannot be edited or deleted

Every look at a sensitive record is logged

Opening a full-size photo, a live camera, or an export is recorded with the person and the time. Nobody can edit or delete that record, including Veramast.

KTW2081Read at the gateProtected at onceTSOpened by your team

Protected from the moment it is read

Each read is protected on the camera, before it goes anywhere. A camera taken from its pole holds nothing anyone can read.

Nothing to open in your firewall

The Watchpost only ever connects out. Your IT team opens nothing inbound, and it accepts no connection from the internet.

Plate reads90 days

Photos30 days

TodayOne year

You decide how long, and the defaults are short

Plate reads are kept 90 days and photos 30, unless your school chooses otherwise within what your state allows. Then they are deleted.

VVeramastTo the owners of Test School

Veramast support opened a session

Who
A. Patel, Veramast support
Why
Your question about yesterday's gate log
Access
Read only, ends by itself at 10:45 am

You are told when we look

Veramast staff never sign in as your users. When support needs to see your records, your owners get an email naming the person and the reason, and access ends by itself.

What Veramast will never do

  • Sell your school's data, or use it for advertising.
  • Show one school's records to another school.
  • Give police or any outside agency a feed of your records, or a search across schools.
  • Sign in to your account as one of your users.

When anyone else asks us for your records, the police included, we send them to you and tell you they asked. If a court order compels us directly, we give the least it requires and tell you, unless the order forbids it.

Your school stays in control

You hold the settings, and you can see every use

Retention you set
Choose how long each kind of record is kept, within your state's limits. Records past their time are deleted every night.
An audit log you can read
Every change, export, and live view at your school is in the audit log, with the person and the time.
Exports need a reason and a second factor
Taking records out of Veramast asks for a written reason and a code from the person's authenticator app. Every export appears in the owner's weekly summary.
A privacy page that is always true
Your school gets a data and privacy page written from its own settings: what is kept, for how long, and every support session and export in the last 90 days.

Subprocessors

The companies that help us run Veramast

Every provider that receives customer data. Each has a signed data processing agreement, your school hears 30 days before a new one is used, and your school's records are stored in the United States.

CompanyWhat it does for VeramastWhat it receives
AWSCloud storage, backups, and record protectionProtected records, photos, and backups
SupabaseDatabase and sign-inAll customer data
VercelHostingRequest details, no customer records
ResendEmailThe recipient's address and the message
TwilioText messages and phone callsThe phone number and the message
StripePaymentsThe payer's name and payment method
SentryError reportsError details from our servers only
Better StackUptime and logsLogs that never hold a plate

Report a vulnerability

Found a weakness? Tell us privately.

Write to our contact of record. The security and disclosure policy covers what to include and what happens next.

Analytics and cookies

This site runs no analytics yet and sets no cookies. It loads no advertising network, tag manager, or third-party pixel, so there is no consent banner. The pages parents use to register vehicles collect no analytics at all.

What search engines see

Search engines are asked not to list your school's Veramast address, except the page parents use to register a vehicle, so families can find it.

Bring your hardest questions

We will go through every promise on this page with your IT reviewer, against your own campus. Expect a reply within 2 business days.