What the extension does with your data, and what it does not.
This page is written for two readers: the person who simply wants to know whether the tool is safe, and the person who has to approve it within an organisation. The first will find the answer in the next paragraph. The second will find the complete details, permission by permission, with the means to verify each statement independently.
Verifill has no technical means of sending anything over the internet: the package contains no networking code whatsoever, and you can verify this yourself in a few seconds.
Four permissions, and the reason for each.
An extension declares upfront everything it is allowed to do, and the browser forbids everything else. Here is our complete declaration: there is no other.
activeTabAct on the tab on screen, at the moment you click the icon or use the keyboard shortcut. Not on other tabs, not in the background, never without your action. Access ends as soon as you move to another page.
scriptingRead the fields of the form in that tab (labels, types, constraints, options) and write into them. This is the tool's very purpose: without this permission, it cannot fill anything.
storageKeep your settings, values and history in the storage space the browser reserves for the extension, on your machine.
unlimitedStorageLift the size limit on that local storage: tens of thousands of fills and the selector memory can be kept there. Nothing is sent anywhere else as a result: this is space on your disk, not additional access.
- Your other tabs
- Your browsing history
- Your cookies
- Reading your clipboard
- Your downloads
- Your passwords
- Standing access to websites
- Any remote server
Turn the connection off: the tool fills in exactly the same way.
It is the simplest test, and it requires no technical skill. It takes a few seconds and is worth more than any statement.
Turn the connection off
Turn off Wi-Fi or unplug the network cable.
Open a form
Any form already loaded in a tab, for instance our try-it page.
Fill it in
Everything works. A tool that sent your data would be unable to.
To go further, the package contains no third-party library and no concealed code, and no code is downloaded after installation. The readable source code can be provided to your IT department for review.
Everything stays on your workstation, and everything can be erased.
What is stored
Your per-form settings (skipped fields, forced values, chosen options), your values and custom fields, the datasets you import, what the tool learned by watching you fill in forms, the selector memory, the fill history, and the address of the pages concerned, which makes it possible to find your settings again.
Where exactly
In the storage space the browser reserves for the extension, on your machine's disk. No server, no synchronisation between devices. A single exception, which you decide: the full backup is written to the folder you choose.
For how long
Until you erase it. “Settings” → “All the memory, by address” shows and erases everything; the history is cleared by period. Uninstalling the extension deletes its storage. Your backup and export files stay in your folders: they belong to you.
What we see of it
Nothing. We receive neither your settings, nor your values, nor your reports, nor even how often you open the tool. We have no way of knowing that you use it.
The clipboard
The “copy” button in the Selectors tab writes a selector to your clipboard, because you ask it to. The extension never reads your clipboard.
The diagnostics log
When a write fails (full disk, storage unavailable), the extension records it on your machine: the operation concerned, the time, and the technical reason. Never your values. This log never leaves your workstation.
Installed from the store, or rolled out by your administrators.
No workstation needs to create an account or reach a server to use the tool.
From the Chrome Web Store or Microsoft Edge Add-ons, like any extension. For a managed fleet, the extension can be installed on every workstation through the browser's admin console (Chrome and Edge policies).
The published package embeds no model: label understanding relies on rules written in the code. This is not a disabled option, it is an absence your team can verify by listing the package's files.
The extension's readable source code can be provided for review before any rollout.
With Verifill Enterprise, the licence is a signed file in your organisation's name, verified directly on each workstation. It requires no account, no connection and no exchange with us.
The extension requires no account: nothing to activate online, no credentials to manage, no data to declare to us.
A complete package, ready to hand over.
Every element on this page can be verified: the privacy policy, the published measurements, and the extension's code if your IT department wishes to review it before any rollout.