Security

Sensitive documents are processed entirely in memory. Nothing you submit is written to disk, cached, or forwarded to third-party model providers. Once a request completes, the working data is discarded.

This is the foundation of our security posture: the safest data is the data we never store.

All data in transit is protected with TLS 1.2+ using strong cipher suites. Account and configuration data at rest is encrypted using industry-standard AES-256.

API keys are stored as salted hashes and shown in full only once at creation time.

Veriis runs on hardened cloud infrastructure with network isolation, least-privilege access controls, and continuous monitoring. Inference is auto-scaled across multiple regions with health checks and automated failover.

Production access is restricted to a small set of authorized engineers and is logged and audited.

Workspace access is scoped per organization. Administrators manage who can access data and rotate API keys at any time. All privileged actions are recorded in an audit trail.

We enforce strong authentication for internal systems and review access on a recurring basis.

Our controls are aligned with SOC 2 Type II and ISO 27001 frameworks, and our data handling supports GDPR obligations. Documentation and reports are available to customers under NDA.

We welcome reports from security researchers. If you believe you've found a vulnerability, please email security@veriis.io with details so we can investigate. We commit to acknowledging reports promptly and keeping you informed as we resolve them.