Security & Data Practices
We expect your firm to run its normal vendor diligence — and we're built for it. Here is exactly how we handle your data and our own, and what to expect when your review starts.
Your Firm's Data
What you do on Verata is yours — your searches, your notes, your pipeline.
Never shared
Your firm's search activity, saved research, candidate notes, and pipeline data are never shared with other customers or third parties. Each firm's workspace is its own.
Always exportable
Your data is yours. Export your research, candidates, and search records to Excel/CSV at any time — including if you leave.
Deleted on request
If we part ways, your data is deleted on request. No retention games, no hostage data.
Self-contained by design
Verata doesn't connect to third-party ATS or CRM systems. There are no integration credentials to manage and no third-party data paths to review — which keeps your vendor assessment surface small.
The Platform's Data
Where our intelligence comes from, and how we stay accountable for it.
Public sources, continuously read
Our AI agents read the open web — company sites, press, deal announcements, professional profiles. We work only with publicly available information, never private user data.
Every fact cited
Facts in the platform link back to the public source where they were found, and revenue estimates show their full comparable-company methodology. You can audit our work.
Privacy rights honored
We maintain a published privacy policy, a GDPR disclosure, and a working opt-out process. Individuals who want their profile removed can request deletion, and we honor it promptly.
Related policies: Privacy Policy · GDPR Disclosure · Opt-Out Process
Running Your Vendor Review
We'd rather start the partnership through your diligence process than around it. When your security, legal, or procurement team engages, they get:
- Security questionnaires completed directly by our team
- A clean standard agreement, with support for your legal review and redlines
- Customer references available for your evaluation
- A written agenda before every call, so your stakeholders know what to expect
We answer security questions directly and specifically — and we only make claims we can stand behind in your review.
Have a security questionnaire? Send it over.
Start the review whenever your process requires it — before the demo, during the pilot, or at contracting. We'll keep pace.
Diligence welcome — it's how the best partnerships start