One integration per enterprise customer
Every enterprise runs its own edition, tenant and configuration of the same system. Your engineers rebuild the integration for each one.
Verax, Latin adjective: truthful. Axus, Latin: axis, the hinge of two faces. Veraxus, coined: the hinge between your software and theirs.
Read, write and export access to your customers’ cloud systems
Read access to anything they can see in the browser. Write access to anything they can do there, with their approval. Full exports of the data and reports they can download. One API across the cloud ERPs, BI tools and business systems your enterprise customers run. They sign in once, and we keep the connection alive.
The problem
Every enterprise runs its own edition, tenant and configuration of the same system. Your engineers rebuild the integration for each one.
The official API covers part of what the screens show. Opening it takes an app registration, an admin approval, and sometimes a paid tier on your customer’s side.
Anything that clicks through a website like a person breaks the moment the page changes. That is not a product.
The product
Your enterprise customer signs into their cloud system once, through Veraxus. Veraxus talks to that system the way its own screens do. Your software gets one API to read their data, write changes back and export full datasets, or a clear failure when the system does not answer.
POST /v1/portal/connect
// Your customer signed in once.
// Codes handled. Session kept alive.
{ "status": "ready" }
// Read access
// Anything your customer can see in the browser,
// through the same calls its screens make.
// Write access
Idempotency-Key: ••••
// Sent once, after an approval
// tied to this exact change.
// Export
// Full datasets, reports and files:
// the exports their users can run,
// delivered to your product as data.
A custom integration per customer. Or a bot pretending to be staff. Neither belongs in production software.
A machine interface on the system they already use. Read, write and export through one API. A clear failure when the system does not answer.
Systems
Cloud ERPs, BI and reporting tools, CRMs, procurement, finance and HR software, healthcare systems and insurance portals. If your customer reaches it through a browser, Veraxus can connect to it. We will connect yours live, in front of you, before you pay.
What enterprise teams use it for
When your product works with an enterprise customer’s data, Veraxus is the connection between the two companies.
Records, transactions and reports from your customer’s cloud system, read into your product through one API.
Updates, new records and approvals posted into their system of record, with an approval on every change.
Full datasets and reports, the same exports their users can run, delivered as data instead of a file someone emails you.
Call on your own schedule. The connection stays signed in between pulls, so nobody signs in again each time.
What a connection handles
Reading one screen is easy. Holding a session through codes, timeouts and expiring logins is the product. Every connection carries all of this.
Sign-in
Data
Where we started
Veraxus was proven on healthcare and insurance portals: cloud apps that ask for a code at every sign-in, block bots, and cut sessions off after as little as two hours. Healthcare software companies run on it in production today.
When a system emails a verification code, Veraxus reads it from a dedicated inbox and enters it. Your customer is not pulled back in to type it.
A connection stays signed in between calls. When a system ends the session, Veraxus sees it, says so, and can sign back in on its own when your customer allows it.
Read access covers what the user can see. Write access runs in its own lane: one send, an approval tied to the exact change, never retried blindly.
Your product, your workflows and your agents get the same contract. Nobody re-types a screen.
Implementation
Email hello@veraxus.ai. We issue the console login and connect your first system with you.
They save their login to their organization’s vault and connect. Your product never sees the password.
Authorization: Bearer pk_live_… scoped to your tenant, optionally pinned to one customer. You sell that access to your customers.
REST at api.veraxus.ai/v1. Agents use MCP. Humans use the docs.
Developer surface
REST at api.veraxus.ai/v1. Agents connect at api.veraxus.ai/mcp. Humans read the docs. Every connected system publishes its operations, and read and write go through the same call.
POST https://api.veraxus.ai/v1/…/execute/{operation}
Authorization: Bearer pk_live_…
Idempotency-Key: ••••
{
"organization_id": "org_••••",
"input": { "from": "2026-07-01", "to": "2026-09-30" }
}
{
"status": "ok",
"operation": "••••",
"kind": "read",
"http_status": 200,
"projected": { … },
"client_reference": "••••"
}
{
"error": {
"code": "••••",
"message": "The system did not answer. The login is saved; try again later."
}
}
Developer docs — how to connect REST and MCP.
Machine spec stays at api.veraxus.ai/v1/openapi.json.
Spec is public. Calls are not.
Failures
Access starts with a live connection to your customer’s system, while you watch. We issue the console login first. Docs are public. Pricing is part of access.
| Event | What you get |
|---|---|
| System answered | The data, and when it answered |
| Session ended | expired, with the reason |
| Code needed | needs_code, held until it arrives |
| System down | portal_outage, never a guess |
| Write outcome unclear | unknown_outcome, checked by a read, never resent |
Pricing is part of access. We share it when we issue yours.
We return what the system returned. If it does not answer, the call fails.
Live calls wait on the system. Time the one you care about.
If a system is down, the call says so by name.
Email hello@veraxus.ai. We issue console logins. There is no public ticket queue.
Trust
Credentials are stored per organization and never returned on the API. Health data is handled under a BAA. Security questionnaires: hello@veraxus.ai.
System credentials and authenticator seeds are stored per organization, encrypted at rest with AES-256-GCM, and never returned on the API. Keys are stored as SHA-256 hashes; plaintext is shown once at mint.
A key identifies your tenant and one customer organization. Connections, credentials and usage stay on that path. One customer’s session is never shared with another.
Connections are read-only until write access is granted for that customer. Every write carries an approval tied to a hash of the exact change and the user who approved it.
Every call writes tenant, organization, key, system, status and billing. You can fetch prior results by id.
| Sensitive data | Customer data stays isolated by tenant and organization. Health data is handled under a BAA. |
|---|---|
| Signed BAA | Required before we run production calls that carry patient data. |
| Access scope | Read-only by default. Write access is granted per customer. Exports run under the same login, isolation and audit as reads. |
| Encryption | System credentials encrypted at rest (AES-256-GCM). Never returned on the API. API keys hashed (SHA-256). |
| Access control | API key → tenant (you) → organization (your customer). Invite-only console. Nobody self-registers. |
| Audit logs | Usage line per call: tenant, organization, key, system, status, billing. Prior results fetchable by id. |
| Retention | We keep the record and usage line needed to retrieve a result and bill it. The schedule is in the agreement and the security questionnaire. |
| Subprocessors | Named processors, roles, and locations are in the security questionnaire. Email hello@veraxus.ai. |
| Data use | Customer data is used to perform the call you requested, return the result or a clear failure, and keep the operational record for that call. |
Your product reads data, exports it, or sends a change. We use your customer’s vaulted login to reach their system, hand the result back to your software, and keep the record needed to look the call up and bill it. Usernames, passwords and authenticator seeds stay in the organization vault. If the system is down or the sign-in does not go through, the call fails in the open. Writes go out once, and only with an approval. Data comes from the system, never a guess.
A key for your software. Read, write and export access to a cloud system your customer runs, connected live before you pay.
Companies serving enterprises
Tenant-scoped pk_live_ keys. Read, write and export access to every customer’s system through one API. OpenAPI is public.
Bring a system
Your system, your login, your data. We connect it in front of you and show what comes back, or a clear failure.
Email to connect mine