Verigrant › People applying

One application. Every place you apply.

You have typed your work history, your education, your address and your documents into more forms than you can count, and every single one of them kept a copy you will never see again. Fill it in here once and it is yours. What you fill in is not another application: it is structured information you keep and control, and an institution receives the part it asked for only at the moment you grant it. After that, applying to a job, a college, an apartment or a lender is a matter of saying yes.

Free forever. It takes about an hour, once, and then you stop being asked.

Once is how many times you type it
Every field is granted, never given away
Nobody can read it, including us
Stop retyping your life The same twelve fields, in a different order, for the last time.
Jobs and schools, from one place The same application serves a role, a degree, a flat and a loan.
Your assistant can apply for you Hand it a name to apply under, and approve what comes back.
Cut off access any time One press and the next attempt to read is refused.

You have already given your whole life away, dozens of times over.

Not on purpose. One form at a time, one attachment at a time, because there was never another way to apply for anything. The result is the same either way: your history is sitting in dozens of databases you cannot name, and there is nothing you can press to get it back.

How it works today

A copy of you in every database

  • Every application is the same hour of typing, done again from scratch.
  • Your documents go out as attachments and never come home.
  • A company you were rejected by in March still holds all of it.
  • Their breach becomes your problem, and nobody tells you for a year.

With Verigrant

One application that stays yours

  • Typed once, kept by you, and edited in one place from then on.
  • Applying is granting access, so no copy leaves without your say.
  • Each grant names the fields, the place and the date it runs out.
  • One list shows who can read what, and one press ends any of it.

Your job application and your college application are the same application

Nobody thinks of it that way, because the two forms look different and arrive years apart. Look at what they ask for and they are the same request. Who are you, what have you done, where have you been, can you prove it. One person, one history, one set of documents, asked for twice in different clothes.

Applying to colleges, once

Your transcripts, your essays and the forms behind them go in once and go out to as many schools as you like. There is no second upload and no third portal account. If you asked for a check on something, the signed note it produced travels with the application, so the tenth school reads the same note the first one did without anybody starting the check again.

Then you graduate, and the education you already entered is the education section an employer reads. Nothing is migrated, because nothing moved. It was always the same application.

The same application, later

  • A job Your work history and your right to work, granted to the employer you chose.
  • An apartment Address history and references, without emailing them to a stranger.
  • A loan What a lender has to see, scoped and dated, and closed again afterwards.
  • Insurance The details a policy needs, released for one quote rather than for good.

How it works, in as much detail as you want

Slide to the level that suits you. It is the same four steps either way, and the second level is the one to read if you are the sort of person who wants to know what the software is actually doing.

  1. Fill it in once, and it locks. Your work, your studies, your details and your documents, in one place. The lock closes on your device as you type, so what leaves your browser is already scrambled.
  2. Apply, or let an assistant apply for you. Give it a Vera ID, which is a name it can apply under. It goes and applies. It cannot open anything with that name, so it is not carrying your life around while it works.
  3. Approve, and the fields open. Every application waits in a queue for you. You look at who is asking and what for, you approve the ones you want, and that is the moment those fields become readable to that one place.
  4. Change your mind any time. One press and the next time they look, they are turned away. Grants also run out on their own, so forgetting one is safe.
  1. One data key per account, and a fresh key per saved version. Your password is stretched with Argon2id in a background worker, which unwraps a random master key that never leaves the browser. Each record is canonicalised, padded to a size class and sealed under XChaCha20Poly1305 with a fresh key on every write, so a reader who opened version seven cannot open version eight.
  2. A Vera ID in review mode authorises exactly one route. POST /vera/applications writes a pending row and nothing else. It is stored as a hash, it is shown once, and one unanswered application per institution is allowed, so a leaked identifier cannot flood your queue. Auto mode exists too, and its cost is stated plainly further down this page.
  3. A disclosure is a signed statement plus a sealed key bundle. Your browser verifies the institution's public key against its own domain and against an append only log, refuses to seal if either check fails, then seals each chosen record key to that key with X25519 and signs the statement with yours. The institution decrypts in its own systems with a private key we have never held.
  4. Cutting access off binds at once, and retiring a key is a second step. The grant row is read again on every request, so withdrawing takes effect on the next call, with nothing to wait out. Retiring a key an agent already holds is a separate step that runs in your browser at your next sign in, and until it runs the interface says so rather than claiming more than it can do.

The security page carries the same argument at full length, including the parts that are inconvenient for us. Read the security page

What you get back for that hour

Filling this in properly takes about as long as three careful applications do today. Here is what it buys you.

A breach somewhere else stops mattering

The companies you applied to are not holding a pile of your documents, because you granted fields rather than sending files. There is much less of you out there to lose.

One application, every kind of application

A role this year, a course next year, a flat after that. You keep editing the same thing rather than rebuilding it from memory each time somebody asks.

Your assistant stops inventing you

An agent filling forms on your behalf is guessing at what you meant. Here it reads nothing and claims nothing for you. It applies, and you are the one who answers.

You can leave with all of it

Download the whole application as a file that unlocks with a phrase you choose. Your backup does not depend on this company continuing to exist.

How much you want to be asked

A Vera ID is the name you give an assistant so it can apply on your behalf. There are two modes, review and auto, and the only difference between them is whether you are in the loop for every disclosure. You set how long a share lasts in both.

Review mode, and the default

Nothing opens without you

  • The agent can do exactly one thing with it, which is ask on your behalf.
  • Each application lands in a queue that you work through.
  • Approving is what opens the fields, and it happens on your device.
  • You choose how long each share stays open before you approve it.
  • The agent never holds anything readable, so it has nothing worth stealing.

Auto mode, for people who want no clicks

It acts inside limits you signed

  • You pair one agent once, with a written limit on what it may ever ask for and how long each share lasts.
  • Inside that limit it issues on its own, and each one shows up in your list.
  • The limits are enforced by us, not by the agent behaving well.
  • You can revoke it, and every route closes to it immediately.

The sentence we will not soften

Auto mode means that you, the one agent you chose, and anyone that agent's key leaks to before you next sign in, can read the fields you allowed for the window you allowed. We still cannot. That is the trade, and it is why review mode is the default and the one we recommend.

We never vouch for you. A check says a review happened.

If a place wants more than your word, you can ask for a check. Today a member of Verigrant staff reviews it and records what they found, with outside verification vendors to follow. What comes back to you, if it is approved, is a short note naming the kind of check, who ran it and the date, and you attach that note to an application yourself.

The note is signed, so anybody can check it later with a key we publish and never has to ask us anything. That is what makes it worth the same at the tenth school as at the first. What the note never says is that your application is true. We do not display it, rank it or summarise it, and we could not stand behind the record it travels with even if we wanted to, because we cannot read that record.

  • You ask for it, and you decide who sees it The note is yours. Nothing goes out with an application unless you attached it.
  • The note is the whole of what we hold A result carrying actual field values is refused at the door.
  • Verigrant makes no claim about you We never say a person is genuine. We say what was reviewed and by whom.

Why it is built this way

The moment a middle layer starts standing behind facts about people, it becomes the kind of company that decides who gets a job, a place or a loan, with all the law and all the responsibility that follows. We would rather be the road than the judge.

It is also the only version that survives contact with encryption. We cannot vouch for an application we are unable to read, so we do not pretend to.

Who says what

What is carried on an application and who stands behind it
On the application Who says it
The application itself You, sealed by you, opened by the institution you chose.
The note from a check Whoever reviewed it, saying what they reviewed and when.
The consent You, signed by you, and checkable later.
A judgement Nobody. There is not one here to give.

Your application, from filled in to cut off

Nothing becomes readable until you make it readable, and it closes when you say so.

You fill your application in once, you apply anywhere with it, you grant the fields an institution asked for, and you can revoke that grant at any time. You fill it in once You apply anywhere You grant the fields You cut it off

The honest limit, said here rather than buried. Revoking a grant stops every future read. It does not reach what an institution already pulled and wrote down, which stays theirs under their own retention, and which is exactly why a grant is small and late rather than large and early.

Questions people ask first

The awkward ones are here too, answered rather than avoided.

Can I really use one application for jobs and for colleges?

Yes. A job application and a college application are the same person being asked for the same history in two different shapes. Your education section is your transcripts. Your work history is your work history. You fill it in once and grant from it, so applying to a university in the autumn and to an employer in the spring uses the same application and neither one makes you type it again.

How long does it take to fill in?

About an hour if you do it properly, and you do it once. That is roughly what three careful applications cost you today, and after it you stop paying that cost at all. You can also start with the short version and fill in the rest the first time somebody asks for it.

Can Verigrant read my information?

No. The lock closes on your device, before anything is uploaded, using a key derived from your password and held only in your browser. What our servers store is a sealed block. There is no support tool that opens it, no administrator button, and no route in the software that would let us read it even if we were ordered to. Somebody who stole the entire database would take away locked boxes and no keys.

So what can Verigrant see?

The outside of the boxes. Your email address, because a login has to be routed somewhere. How many records you keep and roughly how big each one is. When you edit. Which institutions you applied to, when, and which of them moved you forward. We think that is a fair thing to know about us, so it is written out in full on the security page rather than left for you to work out.

What happens when I cut off access?

The next attempt to read is refused, immediately, with no waiting period and nothing left open behind it. Anything the institution already opened and copied into its own systems is theirs, held under its own retention, and we cannot reach into their database. That is why a grant is small on purpose, and why the full application is only unlocked at the point somebody decides to take you seriously.

Can my AI assistant apply for me?

Yes, and it is the point. You hand it a Vera ID, which is a name it can apply under. It cannot read anything with that name and it cannot unlock anything. Every application it files lands in a queue you work through, and approving is what opens the chosen fields to that one institution. If the assistant is careless or compromised, it was never holding anything readable.

Does an institution see everything about me?

No. A grant covers only the fields you picked, and the rest is not merely hidden from them, it is locked and they were never given the key. Most institutions start with a short preview so they can sort applications, and the full application is unlocked only if they decide to take you further and you agree at that moment.

What does a check mean here?

It means somebody reviewed one of your claims and wrote down what they found. Today that reviewer is a member of Verigrant staff, and outside verification vendors are the next thing to be connected. An approved check comes back as a short note naming the kind of check, who ran it and the date, signed so that anybody can check it later with a key we publish. It says a review happened. It is not us saying that your application is true, and we never say that about anyone.

What if I forget my password?

At signup you are given a recovery phrase and asked to write it down. With the phrase you can set a new password and keep everything. Without the password and without the phrase, the data is gone, permanently, and we cannot recover it either. We can give you your account back. We cannot give you your application back, because we never had a way in. That is the honest cost of the promise on the rest of this page.

Can I take my information out, or delete it?

Both, whenever you want. You can download the whole application as a file that unlocks with a phrase you choose, so your backup does not depend on us existing. You can also delete the account and everything under it. An application you cannot walk away from is not really yours.

Is it really free?

Free forever for you, and free for any assistant acting for you. Institutions pay when they take a full application into their systems. The person whose data it is should not be the one paying for permission to hold it, and a layer funded by the people it protects would end up selling them out.

Fill it in once. Apply to everything else with it.

An hour now, and then it is done. If you want the other side of the story first, the institutions page says what a company receives and the security page says what we can and cannot do.

Free forever. Nobody reads a word of it, including us, until you say so.