What this site collects, and what it does not.

Last updated · 13 September 2026

What this site does not do

This site uses no advertising cookies, no social media buttons and no third-party hosted fonts. Typefaces are served from this domain.

The VERA software itself sends no telemetry. This page covers the public website only.

Audience measurement

On veraforensics.com (production), the site loads Microsoft Clarity (Microsoft Corporation, United States): heatmaps and session recordings. Advertising is off. The script is not loaded on gated access pages or on the staging site.

To object to this processing, write to alexandre@veraforensics.com.

Recordings can include mouse movement and on-screen text. Form fields are masked in Clarity. Do not type investigation data into this site.

Newsletter subscription

If you subscribe, your email address is stored with the site language, the page you subscribed from, the date, and a one-way hash of your IP address used only to limit automated abuse.

Subscription is confirmed by an email containing a link. Without that click the address stays pending and is never used. Every message carries an unsubscribe link that deletes the record.

Legal basis: your consent. Retention: until you unsubscribe, then deleted within thirty days.

Demonstration requests

The form collects your name, organisation, role, country, work email and, if you choose, a message. These are used to review the request, reply to it and prepare the session.

Legal basis: pre-contractual steps taken at your request. Retention: three years after the last exchange, then deleted.

Access to restricted documents

Where a personal access link is issued to you, acceptance of the confidentiality wording is timestamped against your email address, and views of the document are logged. This records who received what and allows access to be revoked.

Legal basis: legitimate interest in protecting information held as a trade secret. Retention: three years.

VERA account

The account (access requests, downloads, licences, subscription, credits) is hosted by Supabase in Germany (Frankfurt). It stores professional identity, organisation, entitlements, consents, an audit log, the credit balance and AI usage events (not case content). Legal basis: contract and legitimate interest in securing access. Retention: the life of the relationship, then three years.

Payment (Stripe)

Cloud subscriptions and credit packs are paid through Stripe (Stripe Payments Europe, Ltd). VERA Forensics does not receive or store card numbers. Stripe processes payment data to perform the contract. Invoices are available in the billing portal opened from the account.

Off-workstation AI (Cloud and Trial editions)

When you enable off-workstation AI, the query text, extracts needed for search or the assistant, and audio for transcription when used, are sent to inference processors (currently DeepInfra, Jina, Fireworks), including outside the European Union. That processing happens only after a separate consent in the application. VERA Forensics does not keep case content; the Cloud API meters usage to debit credits.

The institutional Full edition sends nothing to VERA Forensics or to those processors: AI, when used, runs on the customer's infrastructure.

Processors

Form and account data is processed by Supabase (European Union) and by a transactional email provider (Resend). The site itself is served from a server in the European Union (PulseHeberg, Toulon).

Microsoft Clarity processes browsing data, including outside the European Union. Stripe processes payments. Inference processors receive extracts only if off-workstation AI is consented. No data is sold, exchanged or passed on for commercial purposes, to anyone, ever.

Your rights

You have rights of access, rectification, erasure, restriction and objection, and a right to portability. Write to alexandre@veraforensics.com: the request is handled within thirty days and there is no procedure to follow.

You may also lodge a complaint with the CNIL, the French supervisory authority.

The VERA software

This policy covers the website and the account. The Full edition runs on the customer's own infrastructure, offline, with no telemetry and no vendor remote access. Cloud and Trial keep case files on the workstation; only off-workstation AI, if consented, sends extracts to inference processors, as described above.