Clear scope. Evidence before assurances.
Verdue is currently offered as a demonstration using example data. Live council operation requires a separate activation and review process. This page distinguishes existing demonstration features from controls that still need operational evidence.
Source and demonstration review: 5 September 2026.
Confirm the whole data path.
The recorded demonstration architecture uses Vercel hosting and does not require a live council database. AWS Sydney is part of the proposed live architecture. Current processing and storage locations across hosting, edge caches, logs, maps, email, backups and support access have not all been verified. We do not claim that every part of the service processes data exclusively in Australia.
A live proposal needs a confirmed provider and subprocessor register covering each service, its purpose, data categories, locations and access arrangements. Installed integrations or a preferred cloud region are not evidence of an active configuration.
No borrowed certifications.
Verdue is not represented as independently assessed or certified. No Verdue penetration-test report, IRAP assessment, ISO 27001 certification or SOC 2 report has been verified for this review. A provider’s assessment does not assess Verdue’s application, configuration or operation.
Tell us early if your evaluation requires independent assurance. Its scope, evidence and any required remediation must be resolved before the relevant live service starts.
What still needs to be demonstrated.
Accounts and access
Demonstration available · live requirements pending
The current demonstration uses a shared prospect account supplied during the sales process. Named production accounts, role enforcement, account revocation and council authentication requirements must be verified for the agreed live service. MFA and SSO are not verified capabilities of this demonstration.
Council and contractor separation
Implementation present · live verification pending
The application associates records with councils and uses council scope in its data access. End-to-end tenant and object isolation, including exports and write permissions, must pass verification before real council data is activated. The demonstration is not evidence that every production access boundary has passed.
Encryption and provider access
Operational evidence pending
Transport encryption, storage encryption, key management, support access and secret handling need configuration evidence for each active service. The proposed use of a cloud service does not by itself establish that these controls are enabled or correctly configured.
Backups and continuity
Live service planning required
Automated backups, retention and a tested restoration procedure have not been verified for a live council service in this review. Recovery time and acceptable data-loss objectives must be agreed and tested before a commitment is made. No measured uptime history or contractual availability guarantee is established by this page.
Evidence, retention and exit
Existing exports · complete exit process pending
The demonstration includes service histories and PDF/CSV reports. Those exports do not establish a complete customer exit package or an immutable audit trail. Data ownership, licensed material, retention, corrections, legal holds, deletion and export responsibilities must be agreed for the live scope.
Privacy and incident handling
Owner and council review required
Service records can contain worker locations, photos and resident information. Approved purposes, data minimisation and retention need review with the council. Incident contacts, escalation, communication and applicable notification responsibilities must be confirmed before live data is accepted. This page does not establish a verified incident-response service.
Agree the evidence before a pilot.
Verdue reports descriptive service evidence and sample sizes, with proportions suppressed when the sample is too small. It does not provide composite contractor scores. A recorded GPS position supports review; it does not prove that every contracted task was completed. Demonstration activity is not a customer outcome or proof of notification delivery.
Internal architecture, claim-register and procurement drafts support the review process. They are not independent assurance reports or approved policies. Ask your Verdue contact which documents can be supplied, their scope and review status. There are no restricted evidence downloads on this page.
Before sharing live data, agree the authorised users, data, support arrangements, security requirements and exit process. Confirm a working contact and escalation route during that review; contact-form delivery and a monitored security mailbox are not verified by this page. Do not submit credentials, personal records or sensitive security evidence through a general enquiry form.
The existing privacy policy and terms are available for review. Their presence does not establish council acceptance or a completed legal review of your proposed service.