How Company Email Verification Works
Source: company.rb
- Company email verification status is automatically reset whenever the reply_to_email address is changed — the company must re-verify the new address
- The system uses two different encryption keys: one specifically for Xero-related data and a separate one for all other encrypted fields
Support scenarios
- "Our company email shows as unverified but we verified it last week" → If the reply_to_email was changed (even a minor edit like adding a space), verification is automatically reset. The new address needs to be re-verified.
- "Xero authentication works but other encrypted data is corrupted (or vice versa)" → The system uses two separate encryption keys. An issue with one key does not affect the other. Check which key is relevant to the failing feature.