Your data

How we handle your data

What we hold, who touches it and how to reach us. We claim no certification.

Who processes data

These are the same companies the privacy policy names.

  • Anthropic, provider of the Claude API we use for standards matching.
  • Stripe, payment processing.
  • Railway, our website host.
  • Cloudflare, DNS for our domain.
  • Google, email for our domain (Google Workspace) and the fonts our pages load (Google Fonts).
  • Our email provider, outbound email delivery for engagement correspondence and, where applicable, warm-outreach infrastructure.

Files you send us

Files for an audit go up through a private link made for your engagement. We accept PDF, images, text, CSV, HTML, Word, Excel, ZIP and .eml files, up to 25 MB each. The link stops taking files once the work is over.

Files sit on our host’s storage volume in a folder named for your engagement. No upload folder is served by address. On your dashboard you see the files for your own engagement. Our staff can open any file.

Name evidence and screenshots

If you attach evidence to a name request, we take one text or .eml file up to 1 MB. A file with binary content is refused. It is sent back only to the client on the file or to our staff, as a plain text download that is never cached.

A screenshot of a look-alike page is a JPEG of at most 250 KB and 2,000 pixels a side. We re-encode it on arrival so no metadata or hidden data comes with it. It is shown only to someone signed in who may open that file.

How long we keep it

We keep every signed file and the working papers behind it for 15 years from the day it is signed or declined. The rest of your engagement material is kept for the length of the engagement plus 3 years.

Anthropic’s business terms say API content is not used for model training. Your files never go into AI training or any data set. Section 6b of the terms says exactly what that means.

Signing in

Clients sign in with a password. The sign-in cookie is sent over HTTPS only and page scripts cannot read it.

Report a problem

Email audit@claimsverified.org.

We hold no SOC 2, ISO 27001 or HIPAA certification.

Claims Verified

The independent standard for supplement and telehealth claims. Our AI rules a brand’s public supplement claims against 109 published standards. Each failing line is rewritten to the rules. A licensed pharmacist signs every Claims Review Report.

audit@claimsverified.org
Toronto · 1200 Bay St, Suite 1201
New York · 228 Park Ave S, NY 10003
Services How it works Free listing check Listing and Launch Clean Monitoring Listing Rescue and appeals Warning-letter response Telehealth: FDA Letter Match M&A diligence Proof on demand Request an audit Book a call
Research Research and data Claims by category Claim rulings Enforcement tracker Enforcement wire Telehealth letter index Daily record
Check our work Standards and method Sample report Corrections What this does not tell you How to verify us Our AI agents and their limits
Company About us Verify a signed file Partner program Client login Common questions Contact
© 2026 Claims Verified Privacy Terms Unsubscribe Every Claims Review Report signed by a licensed pharmacist Published from Toronto · 109 current standards · every figure recomputed from the scan databases before each deploy