Updated: September 2026
Veredis AI ("we", "us", "our") acts as the data controller for any personal data collected through our platform. We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Uploaded trade documents and transaction text are used to produce a compliance decision. Scan History stores an opaque scan identifier, timestamp, subscription tier, risk classification and verdict; it does not save new full reports, extracted text, product descriptions or routes. Download the dossier during the scan if you need your own report. Structured decision records, including rules, evidence references and cryptographic seals, are retained separately for audit and regulatory purposes. Temporary processing storage and external processing have separate operational controls; we do not promise that every upload is processed exclusively in RAM.
We utilize enterprise-grade Large Language Models (LLMs) via secure API endpoints. Under our enterprise agreements with our AI providers, your uploaded trade data is explicitly excluded from being used to train future AI models.
We store account and billing information, limited scan metadata and structured audit evidence. New cross-scan observations use entity digests instead of submitted entity names. Digests are pseudonymous linkage keys, not a guarantee of anonymity. When you add an entity to Nightly Radar, we retain its name, identifiers and monitoring state to provide that subscription. Radar retention is separate from document processing.
Earlier versions saved encrypted full scan results and entity names in cross-scan records. Those history reports are no longer available through Scan History. This change does not itself erase historical records, backups or data already sent to other processing systems. Legacy cleanup and retention periods require a verified retention inventory; no completed purge or universal deletion deadline is claimed here. Contact us about access, retention or deletion requests. Required audit evidence is handled separately from report history.
Contact our Data Protection Officer at privacy@veredisai.com for any subject access requests.