Data protection summary
Version of 20 October 2026
A one-page summary for partners' data protection, legal and IT reviewers. The privacy notice gives the full detail.
| Topic | VeriList |
|---|---|
| Operator | Adaa Foundation for Studies and Research |
| Roles | Your organisation is responsible for its lists. Adaa Foundation processes them only to run the checks you request. A data processing agreement is available on request. |
| What is processed | The beneficiary lists you upload, the result files VeriList produces, and account and access request details. |
| Purpose | Checking lists for possible duplicates, household links, ID problems and data gaps. No other use. |
| Separation | Each organisation sees only its own lists. Lists are never compared with other organisations' lists. |
| Analysis method | Rule-based algorithms developed by Adaa Foundation in Python. No artificial intelligence. Lists are never sent to AI services or used to train models. Results are reproducible, and every flag shows its evidence. |
| Decisions | VeriList never removes or edits a record. The reviewing team makes every decision. |
| Encryption | HTTPS on every connection. AES-256 for stored lists and result files. |
| Processing | In memory. Lists are not kept on the processing service. |
| Access | VeriList's processing service, and Adaa Foundation's technical administrators for maintenance only. Platform administrators cannot open records in VeriList. |
| Activity records | Result downloads and list deletions are kept in a permanent audit log. Application logs hold no list content. |
| Retention | Lists and results until you delete them. Files are removed at deletion and not kept in backups. Basic list records stay in database backups for up to 30 days. |
| Incidents | Your organisation is informed within 72 hours of us becoming aware. |
| Services | Supabase, Railway, Vercel, Resend, Cloudflare Turnstile. |
| What to upload | Names, ID, phone, location and household details only. No health, protection or vulnerability information. |
| Contact | support@verilist.org |