Security
Institutional-grade security for your most confidential deals
Investors, lenders and developers trust Veridue with the data behind billions of dollars of assets, and you can too.
We protect your data to the highest standards, with independent certification and continuous monitoring, so security is never the reason a deal slows down.
SOC 2 Type II
Monitored by Vanta
GDPR
ISO 2700I
Built to be audited
Certified and independently checked
We hold SOC 2 and ISO 27001, and we are GDPR compliant. Vanta monitors our controls continuously, so our compliance is a live status rather than an annual snapshot.
Encrypted, and deleted when you leave
Your data is encrypted using AES-256 at rest and TLS in transit. We retain it only while you are a customer, then securely delete it in accordance with our retention policy.
Access strictly under your control
People sign in with Single Sign-On (SSO) and multi-factor sign-in. You decide who can see which deal, and we keep a full record of who opened what, available to you on request.
Monitored, and independently tested
We monitor our production systems continuously, and independent testers probe the platform on a regular schedule, with every finding tracked through to resolution.
We never learn from your documents
Our edge comes from our own domain models and energy ontologies, not from your files.
Your deal data is confidential, and we keep it that way: held separately for each customer, never shared with anyone else, and never fed into models that other customers benefit from.
You decide who sees your deal data, and how long we keep it
Kept separate for every customer, and never shared across customers
Never used to train shared or third-party models
You decide who has access, and you control retention and deletion
Outputs your investment committee can check
Security is not only about where your data sits, it’s about trusting what comes back.
Veridue runs a deterministic layer on top of leading AI models, so results are consistent and repeatable, not the output of unpredictable, autonomous agents.
Every answer traces back to the document it came from, so your team and your IC can check the work and move with conviction.
Every answer traces back to the document it came from, so your team and your IC can check the work and move with conviction.
Deterministic, repeatable results
Full traceability from every insight back to source
Reviewed by our experts before it reaches you
See it for yourself
Our Trust Center gives your security and IT teams a live view of our compliance status, the controls we run, our sub-processors and our latest reports, all in one place and available on request.
Trust Center (Upcoming)Privacy handled properly
Your legal and compliance teams get what they need, without slowing the deal down.
GDPR compliant
Data Processing Agreement (DPA) available
A clear, published list of sub-processors
EU data handling
Security questions?
We have answers
We are happy to share our security overview and SOC 2 report, complete your security questionnaire, and walk your team through anything, all under NDA.
Frequently Asked Questions
Is my deal data kept confidential?
Veridue is an AI-native diligence and transaction platform for renewable energy M&A and project finance. We manage your deal pipeline and help prioritise it for you, deliver instant, comprehensive due diligence, a project maturity assessment, and a self-organising data room, so you can screen more deals, catch red flags earlier, and reach conviction faster, while increasing rigor, without increasing headcount or costs.
Do you use my data to train your AI?
No. Veridue runs a deterministic layer on top of leading AI models, so results are consistent and verifiable. Every insight has fully auditable trace back to source documents.
Does the platform get better by using my data?
Our customers take Veridue’s diligence output into IC all the time. Veridue is designed to help you move faster and with greater rigour, but not replace your ultimate decision. The output is consistent, verifiable, and fully traceable to source, so it stands up to IC and lender scrutiny, and enables you to present with maximum confidence. If you need a rubber-stamped, “bankable” diligence report, we have partner Law Firms that can provide that to you at greater speed and lower cost than if you hired one to start from scratch.
Are you certified?
24h for a full red flag diligence, versus the weeks or months a traditional process takes.
Where is my data hosted
It’s both in one. You get on-demand diligence and a live transaction workspace, available whenever you need it, on every deal, rather than a one-off advisory engagement.
Can I see your SOC 2 report or send a security questionnaire?
Your data is protected by the highest enterprise-grade security, the same security you get in VDRs like Datasite, Intralinks or Ideals, by default on every plan. We meet the SOC 2 Type II and ISO 27001 standards. Your data stays within the EU if you are an EU Customer and is never used for AI training. These are high-stakes, confidential deals, and we treat them that way.
What happens to my data if we stop working together?
You can export it, and we delete it when our contract ends.
How do you keep the AI output reliable?
Roughly 10x lower than traditional advisory and your first diligence is on us. Get in touch for pricing tailored to your pipeline.