Legal
Privacy Policy
How Verasity™ collects, uses, stores, and protects personal data.
Last updated: May 2026
What data we collect
We collect account information (name, work email, role), workspace configuration data, simulation and training activity (events, completions, reports), brand monitoring inputs (domains, executive names, keywords), and standard usage telemetry needed to operate the service.
How customer employee data is used
Employee data is processed solely to deliver the awareness, simulation, training, and risk-scoring services contracted by the customer. Verasity™ acts as a data processor under the customer's instructions and does not sell or share employee data.
AI usage and data processing
Verasity™ uses AI to generate simulations, training content, and threat-intelligence summaries. Customer-identifying data and employee content are not used to train shared or third-party foundation models. Enterprise customers can opt in to additional model isolation and data residency controls.
Data residency options
Verasity™ is designed to support global enterprise deployment models, including regional hosting and data residency options where configured and contractually agreed. Customers with specific data residency, privacy, or regulatory requirements can request a data residency brief and security documentation.
Subprocessors
Verasity™ uses a vetted list of subprocessors for hosting, email delivery, voice synthesis, and analytics. The current list is available under NDA and is updated when material changes occur.
Retention and deletion
Customer data is retained for the duration of the agreement plus the retention period defined in your order form. On termination, customer data is deleted within 60 days unless a longer period is required by law.
Security safeguards
Verasity™ applies encryption in transit and at rest, role-based access control, MFA, audit logging, and a documented vulnerability management and incident response program. See our Security page for details.
Customer rights
Customers and their employees may request access, correction, or deletion of personal data through their workspace administrator. Requests are honored consistent with applicable law (e.g., GDPR, PIPEDA, CCPA).
Website search and interaction analytics
Verasity™ may collect website search queries and interaction analytics (such as pages viewed, CTAs clicked, and search terms entered into our site search) to improve site experience and content relevance. We do not intentionally collect sensitive personal information through site search. Search queries are treated as analytics data subject to this privacy policy. Do not enter passwords, government identifiers, or other sensitive personal data into the site search field.
Contact
Privacy questions and data subject requests: privacy@verasity.ai.
Questions? Contact privacy@verasity.ai.