Privacy Policy

VeraCerti is committed to maintaining robust privacy protections for our corporate users and their external supplier networks in strict alignment with the European General Data Protection Regulation (GDPR).

1. Data We Collect & Process

• Account Data: Corporate email addresses, business name, contact details, and payment billing parameters processed securely via our payment gateway infrastructure.

• Compliance Documentation: PDF, image, or text forms uploaded by auditors or suppliers (including ISO forms, REACH files, corporate credentials).

2. Purpose of Processing We process data strictly to execute our contractual SaaS obligations: validating metadata via the VeraCerti AI Auditor engine, generating real-time trust score metrics, and issuing continuous expiry alerts.

3. Data Infrastructure & Storage All files, metadata, and customer profiles processed by VeraCerti are encrypted both in transit (SSL/TLS) and at rest. To ensure compliance with EU cross-border data security standards, all platform data operations are hosted strictly within secure European data centers.

4. Third-Party Processors & AI Infrastructure VeraCerti utilizes secure third-party infrastructure and sub-processors (including Stripe for payment processing, Softr for client workspace hosting, and encrypted API conduits for AI parsing models). Data passed to our AI parsing modules is isolated securely and is never utilized by third-party LLM models for public training loops.