An EmailVerificationToken backs the "confirm your email" link sent after signup or when a new address is added. It stores a hashed tokenHash rather than the raw value, links to the account through userId, and points at the specific address being verified through userEmailId. An expiresAt deadline limits how long the link stays valid, and usedAt marks when it was consumed so it cannot be reused. The createdAt time shows when it was issued. Verifying email this way keeps account ownership trustworthy across the Suite platform.
Technical section
Data model, API, and internals — visible to developers.