Privacy
Last updated 16 October 2026
VERIQAY processes your organisation's data under this notice and our Terms. Creating an account and using the product means you accept them.
What we process
Account details from our auth provider, organisation membership, purchase orders and related records you create, documents you upload, review and decision records, and first-party product usage and feedback analytics. Usage events never include document text or trade values.
Subprocessors
Clerk (authentication), Cloudinary in the UK/EU (private document originals), Google Gemini on a paid tier for extraction candidates (no training on customer content), and DigitalOcean (hosting and managed Postgres). We do not use third-party product analytics SDKs such as PostHog or Mixpanel.
Retention
Documents are kept until you delete them. Deleting a document soft-deletes it; a re-upload creates a new version and never overwrites in place. Organisation Owners can export organisation metadata and hashes. You may ask us to delete organisation data.
Money boundary
VERIQAY prepares evidence for a human decision. It never moves, holds, or initiates money.