Welcome to VERSO's Security Center of VERSO Supply Chain Hub (former: sustainabill cloud platform). Our commitment to data privacy and security is embedded in every part of our business. Use this Trust Center to learn about our security posture and request access to our security documentation.
Reports
We may provide security-related reports upon request.
Network Security
We protect our corporate network against external & internal threats.
Security Center Updates
Single Sign-On (SSO)
Single Sign-On (SSO) is now available for our customers. This allows companies to use their own identity provider (e.g. Microsoft Azure) in order to configure which employees may use the VERSO Supply Chain Hub and set their permissions. Employees then use the company's identity provider for login to the Supply Chain Hub.
PHP "php2shell" vulnerabilities (CVE-2026-109618, CVE-2026-109619)
The Supply Chain Hub is not affected by these vulnerabilities. The platform does not use PHP: the backend is built on Python (Django) and the frontend on Node.js/Vue, and PHP is neither installed in nor executed by our application containers. No action is required by customers.
Improved Password Strength
We have updated the password strengths: When users change their password, they are not allowed to re-use one of their last ten used passwords. In addition to that, passwords must contain at least one digit, one special character, one upper and one lower case character.