What this site collects, and what it does not.

Last updated · 10 October 2026

What this site does not do

This site uses no advertising cookies, no social media buttons and no third-party hosted fonts. Typefaces are served from this domain.

The VERA software sends no telemetry. This page covers the site, the account, and the placement at VERA Forensics.

Audience measurement

On veraforensics.com (production), the site loads Microsoft Clarity (Microsoft Corporation, United States): heatmaps and session recordings. Advertising is off. The script is not loaded on gated access pages or on the staging site.

To object to this processing, write to alexandre@veraforensics.com.

Recordings can include mouse movement and on-screen text. Form fields are masked in Clarity. Do not type investigation data into this site.

Newsletter subscription

If you subscribe, your email address is stored with the site language, the page you subscribed from, the date, and a one-way hash of your IP address used only to limit automated abuse.

Subscription is confirmed by an email containing a link. Without that click the address stays pending and is never used. Every message carries an unsubscribe link that deletes the record.

Legal basis: your consent. Retention: until you unsubscribe, then deleted within thirty days.

Demonstration requests

The form collects your name, organisation, role, country, work email and, if you choose, a message. These are used to review the request, reply to it and prepare the session.

Legal basis: pre-contractual steps taken at your request. Retention: three years after the last exchange, then deleted.

Access to restricted documents

Where a personal access link is issued to you, acceptance of the confidentiality wording is timestamped against your email address, and views of the document are logged. This records who received what and allows access to be revoked.

Legal basis: legitimate interest in protecting information held as a trade secret. Retention: three years.

VERA account

The account (access requests, downloads, licences, subscription, credits) is hosted by Supabase in Germany (Frankfurt). It stores professional identity, organisation, entitlements, consents, an audit log, the credit balance and AI usage events (not case content). Legal basis: contract and legitimate interest in securing access. Retention: the life of the relationship, then three years.

Licence and download traceability

Each licence key is personal. It contains its holder's name and work e-mail address and a short identifier, which the software may show on screen and write into its exports. Each installer download is recorded: account, date, version, a hash of the IP address and the text of the terms accepted.

Purpose: protect the software against unauthorised distribution, and be able to trace a copy, a screenshot or a key in circulation back to its holder. Legal basis: VERA Forensics' legitimate interest in protecting its trade secrets and copyright. Retention: the life of the licence, then five years.

Payment (Stripe)

Credit packs are paid through Stripe (Stripe Payments Europe, Ltd). VERA Forensics does not receive or store card numbers. Stripe processes payment data to perform the contract. Invoices are available in the billing portal opened from the account.

AI at VERA Forensics

By default, AI runs on the workstation or on the service server: that is offline, and nothing leaves. When you select the placement at VERA Forensics, the query text, extracts needed for search or the assistant, and audio for transcription when used, are sent to inference processors, mainly in the United States. Today: DeepInfra (United States) for text, embeddings and transcription, Fireworks (United States) for images, Jina (Germany) for reranking. The examiner chooses neither the processor nor the model. That processing happens only after a separate consent in the application. Case files stay on the workstation. VERA Forensics does not keep case content; the API meters usage to debit credits.

The workstation and service-server placements send nothing to VERA Forensics or to those processors.

Processors

Form and account data is processed by Supabase (European Union) and by a transactional email provider (Resend). The site itself is served from a server in the European Union (PulseHeberg, Toulon).

Microsoft Clarity processes browsing data, including outside the European Union. Stripe processes payments. Inference processors receive extracts only if off-workstation AI is consented. No data is sold, exchanged or passed on for commercial purposes, to anyone, ever.

Your rights

You have rights of access, rectification, erasure, restriction and objection, and a right to portability. Write to alexandre@veraforensics.com: the request is handled within thirty days and there is no procedure to follow.

You may also lodge a complaint with the CNIL, the French supervisory authority.

The VERA software

This policy covers the website and the account. VERA runs on the customer's own infrastructure, with no telemetry and no licence check over the internet. Case files stay on the workstation. Only the placement at VERA Forensics, if chosen and consented, sends the query text to inference processors, as described above.