Public
VC-PUB-001

VERLOG Campus — Privacy Notice

Effective July 28, 2026 · Reviewed annually and on material change · Sign in

The short version: your files pass through VERLOG Campus; they do not stay. Institutional files are processed transiently to produce your output file and are automatically and permanently destroyed after you download your results — or within 24 hours at the latest. We keep only the receipt: counts, checks performed, timestamps, and checksums, with no student data in them. Everything happens in Canada.

Who we are

VERLOG Campus is operated by VERLOG Technologies Inc., a Canadian company based in Calgary, Alberta. It turns institutional data exports into government-ready files for higher-education financial aid offices. Our Privacy Officer is Brian Scriver, CEO (info@verlogtechnologies.com).

What we collect and why

Information	Why	How long
Institutional files you upload — may contain student personal information (identifiers, SINs, financial aid details)	Solely to validate and transform them into the output format your institution requested	Destroyed automatically after your downloads complete, or within 24 hours — whichever is first
Your account — name, work email, role	Sign-in and access control	Life of your institution's contract + 30 days
Security logs — sign-in events, actions, IP address	Security monitoring and the audit trail your institution relies on	1 year
Session cookies — strictly functional	Keeping you signed in	Session only. No advertising cookies, no tracking pixels, no analytics profiling

What we never do

We do not sell personal information — anyone's, ever.
We do not use your data for advertising, marketing, or profiling.
We do not use your data to train AI models; no AI system processes institutional data in this service.
We do not move your data outside Canada: the service runs entirely in the AWS Canada (Central) region.

Who we share with

One subprocessor: Amazon Web Services, which hosts the service in Canada under a data-processing agreement and independently audited security controls. We disclose personal information to authorities only under a valid warrant, subpoena, or other lawful requirement, and we notify your institution first unless the law prevents us.

Your rights

For student or institutional records, contact your institution — it controls those records, and we support its responses. For your own account information, email info@verlogtechnologies.com to access or correct it; we respond within 30 days. Complaints go to the same address, attention Privacy Officer; you may also contact the Office of the Privacy Commissioner of Canada or the Information and Privacy Commissioner of Ontario.

Security in one paragraph

Everything is encrypted in transit (TLS) and at rest (AES-256). Access is least-privilege with multi-factor authentication. Each institution's data is isolated from every other's. VERLOG staff cannot open your files without an explicit, audited access grant from your institution. Automated monitoring runs continuously, and we commit to notifying your institution within 72 hours of any confirmed incident affecting its data.

Changes

If this notice changes materially, we will notify institutional contacts in advance and post the updated version with a new effective date.

VERLOG Technologies Inc. · Calgary, Alberta, Canada · info@verlogtechnologies.com