Veritor is built for banks, fintechs, and compliance teams whose own customers ask hard questions about data handling. We answer them in writing: encryption, residency, retention, audit access, sub-processors, incident response. DPA available on request.
If you've found a vulnerability — please follow our disclosure policy at /.well-known/security.txt. Encrypted email to security@veritor.org preferred. We acknowledge within 48 hours, triage within 5 business days, and post fix-timeline updates per CVD norms.
For incidents affecting your data: customer-facing incident notification within 72 hours of confirmed breach (GDPR Art. 33). For security-relevant non-incidents (e.g., elevated DDoS, suspicious authentication patterns), we publish to status page.