What this site collects, and what it does not.

Last updated · 12 August 2026

What this site does not do

This site uses no analytics cookies, no advertising trackers, no social media buttons and no third-party hosted fonts. Typefaces are served from this domain, which avoids passing your IP address to an external provider.

No cookie is set for any purpose beyond the strictly technical, which is why you are not looking at a consent banner.

Newsletter subscription

If you subscribe, your email address is stored with the site language, the page you subscribed from, the date, and a one-way hash of your IP address used only to limit automated abuse.

Subscription is confirmed by an email containing a link. Without that click the address stays pending and is never used. Every message carries an unsubscribe link that deletes the record.

Legal basis: your consent. Retention: until you unsubscribe, then deleted within thirty days.

Demonstration requests

The form collects your name, organisation, role, country, work email and, if you choose, a message. These are used to review the request, reply to it and prepare the session.

Legal basis: pre-contractual steps taken at your request. Retention: three years after the last exchange, then deleted.

Access to restricted documents

Where a personal access link is issued to you, acceptance of the confidentiality wording is timestamped against your email address, and views of the document are logged. This records who received what and allows access to be revoked.

Legal basis: legitimate interest in protecting information held as a trade secret. Retention: three years.

Processors

Form data is processed by Supabase, which hosts the database and the processing functions, and by a transactional email provider. The site itself is served from a server located in the European Union.

No form data is sold, exchanged or passed on for commercial purposes, to anyone, ever.

Your rights

You have rights of access, rectification, erasure, restriction and objection, and a right to portability. Write to alexandre@veraforensics.com: the request is handled within thirty days and there is no procedure to follow.

You may also lodge a complaint with the CNIL, the French supervisory authority.

The VERA software

This policy covers the website. The VERA software itself runs on the customer's own infrastructure, offline, with no telemetry and no vendor remote access: no investigation data reaches Ossire at any point.