Answers for your security review.

Where Veriteus runs, what it processes and how we work. Written for CISOs, DPOs and legal teams, so you don’t have to email us first.

Last reviewed October 2026

You choose where it runs.

On-premise

Inside your infrastructure, without access to other systems or the internet. Recordings, transcripts and statements stay with you.

Typical inference hardware for voice and text, including follow-up questions: one server with four NVIDIA T4 GPUs.

EU cloud

In a cloud in the European Union.

API access. Integrations are scoped per deployment.

Our models are our own, built on research with the University of West Bohemia.

What we process.

What does Veriteus process?: The audio of a conversation, its transcript, written statements and the case documents you choose to link.
Who controls the data?: You do. You remain the controller, and we process the data on your instructions under a data processing agreement.
Does anything leave an on-premise installation?: Raw input stays in your infrastructure. Derived feature sets leave only with your explicit consent.
What happens to data in the EU cloud?: We process it in the European Union on your instructions, under access controls and the safeguards in our data processing agreement. We don’t store biometric identifiers unless you explicitly agree.
Do you train models on your data?: Only if you agree to it in your contract.

How we protect it.

On-premise, Veriteus runs inside your infrastructure and under your own security controls. Send us your security questions and we’ll answer them for your review.

Where we stand on regulation.

Certifications

Veriteus holds no security certification today. We’ll show a badge only after an auditor issues one.

GDPR

Veriteus is designed to support your GDPR obligations. You stay the controller of the data you analyze, and our data processing agreement sets out how we process it.

EU AI Act

Veriteus supports a person who asks questions. It is designed so that it doesn’t make or replace decisions about people. We work with external counsel on how the AI Act applies to each use case.

NIS2 and the Czech Cybersecurity Act

If you are a regulated entity under NIS2 or the Czech Cybersecurity Act (No. 264/2025 Coll.), supplier security is part of your duties. Our answers to your supplier review start on this page.

Responsible use

What we build Veriteus for, and what we won’t let it be used for.

Read our Responsible use policy

What if.

Questions buyers ask a young supplier, and our answers.

What if Veriteus stops operating?: On-premise installations keep running without us. Your license runs for the term of your contract and doesn’t depend on our servers. If we ever wind down, we will tell you at least six months in advance and deliver the final version with documentation for running it on your own.
What happens to our data when the contract ends?: On-premise, your data never left your infrastructure, so there is nothing for us to return or delete. In the EU cloud, we return your data in a standard format within 30 days, then delete it and confirm the deletion in writing.
Do you offer escrow?: For on-premise deployments, we agree continuity terms, including escrow, individually in your contract.
How does an on-premise installation run?: Veriteus is built to run inside your infrastructure, without access to other systems or the internet. Typical inference hardware for voice and text is one server with four NVIDIA T4 GPUs. We install it together with your IT team. Updates come as a package you install yourself, and nothing downloads automatically. How long we support each version is part of your contract.
Who owns the models?: Our models are our own, built on research with the University of West Bohemia. Veriteus owns their intellectual property. The open-weights models we fine-tune remain under their original licenses, which allow us to run them in your infrastructure.
Who owns Veriteus?: Veriteus Technology s.r.o. is a Czech company founded in 2023 and based in Brno. Its founders hold the majority, and Czech Founders VC is an investor. Company details and the team are on our About page.
What is your position on dual use?: We don’t sell Veriteus for military use, to intelligence services, or into countries that aren’t democracies governed by the rule of law. We assess every public-sector deployment individually.Read our Responsible use policy

Subprocessors

Who processes data on our behalf. We list the product and this website separately.

Product	On-premise deployments: no subprocessors.
This website	Website hosting: Netlify, Inc. (USA)
This website	Email, including form submissions: Google (Google Workspace)

Last updated October 2026.

Report a vulnerability

Found a security issue in Veriteus or on veriteus.tech? Email security@veriteus.tech with steps to reproduce. We’ll confirm receipt and keep you posted until it’s fixed.

Please

Test only against your own accounts and data.
Don’t disrupt our services or access other people’s data.
Give us reasonable time to fix the issue before you share it.

If you follow these rules in good faith, we won’t take legal action against you.

Scope: veriteus.tech and its subdomains.

Our contact details are also published in /.well-known/security.txt.

Data Processing Agreement

We sign a Data Processing Agreement under Article 28 GDPR with every customer before we process any personal data for them.

This website practices what we sell.

No cookies. Nothing is stored in your browser.
No analytics, no pixels, no third-party code. We don’t measure your visit.
A strict Content Security Policy. Your browser loads code from this domain only.
Forms are handled by our hosting provider, Netlify, and land in the mailbox of the person who answers you.
Hosted by Netlify, Inc. (USA).

Check it yourself: open your browser’s developer tools on any page. The cookie list is empty.

Read our cookie policy

Get in touch