A method, system and apparatus are provided for geo-verification for access to data stored in a memory of a server having a processor and a network interface connected to the memory. The method includes: storing, in the memory, access control data including an approved geographic area; receiving at the processor, from a client computing device via the network interface, a request for access to the data, the request containing a client location of the client computing device, the client location including global positioning system (GPS) coordinates; comparing, at the processor, the client location to the approved geographic area; when the client location is within the approved geographic area, permitting access to the data for the client computing device via the network interface; and when the client location is not within the approved geographic area, denying the request.