Resources

Security

Security is a set of everyday practices, not a badge. Here's an honest look at what's in place today.

Account protection

Sessions are protected with modern authentication tokens and expire automatically after inactivity.

Password security

Passwords are hashed — never stored in plain text — and minimum strength is enforced at sign-up.

Verified organizations

Schools and workforce programs can request organization verification so their recommendations carry extra weight.

Verified recommendations

Recommendations pass through a review process before they appear on a public profile.

User-controlled privacy

Every builder chooses what's public, what's private, and how much personal detail is shown.

Encryption in transit

Every request between your device and VizID uses HTTPS.

Continuous improvement

We review the platform regularly and update protections as VizID grows. We don't claim compliance we haven't earned.

Report a concern

Found a security issue? our contact form. We acknowledge every report.

What we don't claim

We don't advertise certifications we haven't achieved, and we don't use security theater to make VizID sound bigger than it is. As we grow and complete formal audits, this page will be updated with verifiable evidence.