Security
How Veralens handles the documents you send: encryption, deletion, model training and who to contact.
This page lists what we do with your documents, in plain terms. It only states what is true today. For the legal version, read the Privacy Policy.
Your documents
- Encrypted at rest. The file you send is encrypted at rest. Traffic to the API is encrypted in transit with HTTPS.
- Deleted when the job ends. The file is deleted from storage when the job reaches
completedorfailed. - What we keep. The job record stays in your account: output, target, schema, engine, tokens and cost. You can audit a run later. To delete your account and its content, write to support@veralens.ai.
- No training. We do not train models on your documents or outputs, and we never ask you for training examples.
The AI model provider
To read a document, we send its content and your schema to a third-party AI model provider, on a paid tier that does not use your documents for training. The provider processes the content to return a result. It may keep it for a limited time to detect abuse, under its own terms. This is the same statement as in our Privacy Policy.
Accounts and API keys
- Passwords are stored only as secure hashes.
- API key secrets are encrypted at rest.
- Access to production data is restricted.
- Webhook deliveries are signed with your key, and we refuse to send them to private or loopback addresses.
What we do not claim
We have no security certification today, and this page does not imply one. We do not say "zero retention": the job record stays, as described above.
Report a problem
Write to support@veralens.ai with "Security" in the subject. Tell us what you found and how to reproduce it. We reply within 1 business day.