Verazo
Log inCreate an account
Docs

Documentation

Everything on this platform runs against real infrastructure. Every request and response shape documented here matches what the product sends and returns, not a simplified version of it.

Start from your own role

The same pages below, in a different order, depending on whether you own compliance posture or the integrations that produce evidence for it.

For a compliance lead

Get a framework covered and provable

The path for whoever owns ISO 27001, SOC 2, or GDPR readiness and needs to show coverage to a customer or an auditor.

  1. 1
    Getting startedCreate an account and connect the first integration a framework needs evidence from.
  2. 2
    FrameworksPick which of the 6 catalogs to work from and see how many of its controls already map to a real check.
  3. 3
    Control checksRead the full catalog and find the controlId string for each control this platform can already evidence.
  4. 4
    Trust centerPublish coverage, certifications, and sub-processors to a customer once real evidence backs each claim.
  5. 5
    Vendor questionnairesSend your own vendors the same due-diligence questions a customer's security review would send you.
For an integrator

Wire up checks and pull the data out

The path for whoever configures the actual technical integrations and needs to read results back out of the platform.

  1. 1
    Getting startedCreate an account and connect the first provider credential a check will authenticate with.
  2. 2
    ArchitectureSee what runs as a deterministic script, where Verazo AI fits in, and the 5 actions that always stop for a person.
  3. 3
    Control checks by categoryConfigure checks by category, with the exact API call, auth method, and target format each one expects.Cloud infrastructureIdentity and SSO
  4. 4
    REST APICreate and read control checks and evidence records from your own code instead of the dashboard.
  5. 5
    MCP serverQuery the same evidence and risk register, read-only, from your own AI assistant or editor.

Core product areas

Every page on this site, grouped by what it covers.

Foundations

Getting startedCreate an account, connect an integration, and run your first check.ArchitectureWhat runs as a plain deterministic check, where Verazo AI fits in, and the five actions that always stop for a person.Core conceptsControl Check, Evidence Record, Framework, and the rest of this platform's own data model, defined precisely.

Frameworks & controls

FrameworksISO 27001, SOC 2, GDPR, DORA, NIS2, and the EU AI Act, and how a control maps to a check.Control checksEvery check this platform runs, grouped by category, with the exact API call each one makes.

Trust & vendor management

Trust centerPublishing a public compliance page, the NDA gate, and the approval queue.Vendor questionnairesSending a security questionnaire and how the auto-risk score is computed.

Developers & API

MCP serverQuerying your own evidence and risk register from your own AI assistant, ChatGPT, or an editor.REST APIAuthentication, rate limits, and every endpoint, with request and response examples.