Revocable API keys
Create and revoke keys from Settings. Keep secrets server-side — never in client forms or public repos.
Trust & security
Security you can build on
Revocable keys, HTTPS, privacy-minded processing, and honest documentation. We do not display certifications or memberships we have not earned.
Pillars
How we protect access and data
Encrypted in transit
Dashboard and API traffic use HTTPS. Verification requests and responses are protected on the wire.
Modern edge runtime
ValidReach runs on Cloudflare Workers with D1 (and R2 where used) — a globally distributed, small-surface runtime.
Account access control
Session-based auth with role-aware admin tooling. Prefer short-lived secrets and least privilege.
Practices
What teams can verify in-product
Purpose-limited processing
Addresses are processed to return verification results and operate your account — not sold as a marketing list by ValidReach.
Clear result model
deliverable, undeliverable, risky, and unknown with quality flags so you can encode policy deliberately.
Operational visibility
History, list job status, and credit usage help you audit activity in the dashboard.
Fair billing
Unknown outcomes never burn credits. Pack pricing is published on the pricing page.
Questions about security?
We are happy to talk through your setup
Start free, or contact us about volume and integration.