Data retention, GDPR and requesting deletion

Veritus is operated in the UK and processes personal data only for scoring and fraud detection.

Checks are retained for a limited window (7 days on Free, longer on paid tiers, up to custom retention on Scale). After the retention window, personal fields are redacted while the score and reason codes are kept, so your analytics survive without holding personal data indefinitely. There is no US data storage and therefore no Cloud Act exposure.

If a user asks you to delete their data early, email the request to privacy@veritus.uk with the relevant check or request ID. Every decision also sits in an encrypted audit trail, which helps if you ever need to justify a decision to a customer or regulator.