Workspace boundaries
Organization-scoped permissions and row-level data rules help keep studies, responses, and workspace activity within the right organization.
SECURITY & TRUST
Your research data stays yours.
Veritio protects studies, participant responses, and recordings through workspace permissions, isolated data access, and controlled sharing, so your team can move quickly without giving up control.
- Encrypted in transit and at rest
- Consent before optional recording
- No sale of customer or participant data
Protected workflow
ActiveStudy security overview
Team accessOrganization-scoped permissions
ScopedParticipant recordingConsent shown before capture
OptionalShared findingsPassword and expiry; recording revoke
RestrictedSource codeLicensed for self-hosting and modification
AGPL-3.0This overview reflects product safeguards, not an independent audit report.
BUILT INTO THE WORKFLOW
Protection across the research workflow
Practical controls help teams collaborate, collect, and share research without turning product safeguards into claims they cannot support.
Role-based collaboration
Workspace roles give teams different levels of access, so collaboration does not require giving every member the same permissions.
Recording consent
Recording is optional. When it is enabled in supported study flows, participants see a consent step before screen, camera, or microphone capture begins.
Controlled sharing
Supported results and recording links include password and expiration controls. Recording shares can also be revoked when access should end.
YOUR RESEARCH, YOUR RULES
You decide what gets collected and shared
Control begins before a participant opens the study and continues after the findings are ready.
01Before a study
Set expectations first
Write participant instructions, configure study privacy settings, and collect the consent that applies to your research before participants begin.
02During a study
Collect only what you enable
Responses stay associated with the appropriate study. Optional recording begins only when the feature is enabled and the supported consent flow is completed.
03After a study
Keep control of the outcome
Use supported exports and deletion actions, then decide whether findings stay in the workspace or are shared through a controlled external link.
ASSURANCE
Standards are the roadmap. Evidence is the goal.
We separate what exists in the product today from work that is still underway or planned. Certification logos will appear only after independent reports or certificates exist.
Product safeguards
Encrypted transport and storage, organization-scoped access, role permissions, consent for supported recording flows, and controlled sharing options.
WCAG 2.2 Level AA
Accessibility is ongoing product work. We are improving toward WCAG 2.2 Level AA and publish known limitations in our accessibility statement.
Read the accessibility statementSOC 2 Type II
A future assurance objective. We will not claim completion or display a badge before an independent report exists.
ISO/IEC 27001 & 27701
Future information security and privacy management objectives. Certification claims will wait for independently issued certificates.
Privacy obligations, not certifications.
GDPR and India's Digital Personal Data Protection Act are legal frameworks. Veritio is building the operational documentation and processes needed to meet applicable obligations; neither framework provides a product certification.
Page reviewed July 2026 TRUST RESOURCES
The documents behind the promise
Review the policies, commitments, and source code that are available today.
Is Veritio SOC 2 or ISO certified?
Not today. SOC 2 Type II and ISO/IEC 27001 and 27701 are planned assurance objectives. We will update this page and display certification marks only after independent reports or certificates exist.
Who owns the research data?
You do. Customer and participant data is processed to operate the service and deliver the features you choose. Veritio does not sell customer or participant data.
Do you use participant responses to train AI?
Not without your instruction. When you choose an AI-powered feature, relevant content may be sent to the configured AI provider to complete that request. Review the Privacy Policy for the current details.
Read the Privacy PolicyHow are participant recordings handled?
Recording is optional and controlled by the study configuration. In supported recording flows, participants are shown a consent step before screen, camera, or microphone capture begins.
Can external share links be restricted?
Supported result and recording shares can use password and expiration controls. Recording shares can also be revoked. Availability depends on the sharing flow and plan you are using.
Can I self-host Veritio?
Yes. Veritio is available under the AGPL-3.0 license. A self-hosted operator is responsible for securing, updating, monitoring, and backing up their own deployment.
How do I report a security concern?
Email support@veritio.io with a clear description, affected URL or feature, reproduction steps, and impact. Please avoid accessing, changing, or downloading data that is not yours.
Email the security teamRun research without giving up control.
Start with Veritio today, or bring your security questions directly to us.