Zero retention by design

Confiance et sécurité

Your voice arrives, becomes text, and vanishes.

bytes of audio stored

Discarded the instant it becomes text.

third-party AI services

Everything runs on Verity's own servers.

<300

ms latency

Voice in, text out, audio gone — under a second.

Where your voice goes. And where it doesn't.

The whole journey takes under a second.

01 · You speak

Audio is encrypted on your device and streamed. It never touches a disk.

02 · In memory only

Transcription and AI polishing on Verity's own servers. Audio discarded the instant text exists.

03 · Text, yours

Polished text lands in your app, encrypted with your personal AES-256-GCM key. Nothing else remains.

Data practices at a glance

Conservation de l'audio: Zéro — supprimé immédiatement après la transcription
Stockage des transcriptions: Chiffré AES-256-GCM dans votre compte
Empreintes vocales: Jamais créées ni stockées
Données d'entraînement: Votre contenu n'est jamais utilisé pour l'entraînement de l'IA
Partage avec des tiers: Only the named processors listed below. See sub-processors.
Suppression du compte: Toutes les données de transcription définitivement supprimées dans les 30 jours suivant la suppression du compte (conforme à la politique de confidentialité).

Where we stand on compliance

No badges we haven't earned. We build to these standards today and pursue formal certification as we grow — honest status below.

ON THE ROADMAP

SOC 2 Type II

Not yet certified — and we won't claim otherwise. Our infrastructure and internal controls are built to SOC 2 expectations, and a formal audit is planned.

BUILT FOR

PIPEDA & Law 25

Designed around Canadian privacy law from day one: consent, minimal collection, and a real right to deletion.

BUILT FOR

CCPA & GDPR principles

Access, export, and delete your data anytime — the rights those laws demand are simply how Verity works, for everyone.

Security practices

Encryption everywhereTLS 1.3 in transit, AES-256-GCM at rest, unique key per user.

Least-privilege accessNo Verity employee can read your transcripts. Production access requires hardware keys.

Own servers, own rulesNo third-party AI service ever receives your audio or transcripts.

Your delete means deleteAccount deletion purges every transcript within 30 days — backups included.

Dictée vocale pour tous

Does Verity work with all apps ?

Yes. Verity works at the system level, so it injects text into any app — email clients, document editors, messaging apps, web browsers, code editors, and more.

Is there a learning curve for voice commands ?

No. Voice commands follow natural speech patterns — 'new paragraph', 'delete last word', 'select all'. Most users are productive within minutes.

Can I use Verity with one hand or without a mouse ?

Yes. Verity is designed to work entirely with your voice — start and stop recording, navigate, edit, and send without touching keyboard or mouse.

Is the accessibility mode free ?

Core voice input is available on all plans including the free tier. AI formatting and polishing require a Pro subscription.

FAQ sécurité

Is Verity HIPAA compliant?

Not today. HIPAA support, including Business Associate Agreements, is on our roadmap. Verity already processes audio with zero retention and encrypts everything in transit.

Où sont stockées mes données ?

L'audio n'est jamais stocké — il est supprimé immédiatement après la transcription. Les transcriptions, si sauvegardées, sont chiffrées dans PostgreSQL hébergé aux États-Unis. La clé de chiffrement est dérivée par utilisateur, donc personne chez Verity ne peut lire vos transcriptions sans vos identifiants.

Puis-je demander un rapport d'audit de sécurité ?

Nous pouvons partager nos réponses au questionnaire de sécurité et notre aperçu architectural sur demande — écrivez à [email protected]. SOC 2 est dans notre feuille de route mais n'est pas encore initié.

Comment mes transcriptions sont-elles chiffrées ?

Chaque transcription est chiffrée avec AES-256-GCM. La clé de chiffrement est dérivée de vos identifiants de compte via HKDF-SHA256, ce qui signifie que les données de chaque utilisateur sont chiffrées avec une clé unique que les serveurs Verity ne peuvent pas reconstruire sans votre authentification.

Que se passe-t-il en cas de brèche de données chez Verity ?

Nous notifierons les utilisateurs touchés et les autorités de contrôle concernées dans les 72 heures, conformément à l'article 33 du RGPD. Puisque les transcriptions sont chiffrées par utilisateur avec des clés dérivées par HKDF, une brèche dans la base de données seule n'exposerait pas de contenu lisible.

Comment supprimer toutes mes données ?

SOC 2 certification is on our compliance roadmap. We are not currently certified. Our security practices include zero-retention processing, TLS 1.3 everywhere, and encrypted storage.

Your words. Your rules.

Start free — $0, no card

Free forever · no credit card · audio deleted instantly

Where your voice goes. And where it doesn't.

The whole journey takes under a second.

01 · You speak

Audio is encrypted on your device and streamed. It never touches a disk.

02 · In memory only

Transcription and AI polishing on Verity's own servers. Audio discarded the instant text exists.

03 · Text, yours

Polished text lands in your app, encrypted with your personal AES-256-GCM key. Nothing else remains.

Data practices at a glance

Conservation de l'audio: Zéro — supprimé immédiatement après la transcription
Stockage des transcriptions: Chiffré AES-256-GCM dans votre compte
Empreintes vocales: Jamais créées ni stockées
Données d'entraînement: Votre contenu n'est jamais utilisé pour l'entraînement de l'IA
Partage avec des tiers: Only the named processors listed below. See sub-processors.
Suppression du compte: Toutes les données de transcription définitivement supprimées dans les 30 jours suivant la suppression du compte (conforme à la politique de confidentialité).

Where we stand on compliance

No badges we haven't earned. We build to these standards today and pursue formal certification as we grow — honest status below.

ON THE ROADMAP

SOC 2 Type II

Not yet certified — and we won't claim otherwise. Our infrastructure and internal controls are built to SOC 2 expectations, and a formal audit is planned.

BUILT FOR

PIPEDA & Law 25

Designed around Canadian privacy law from day one: consent, minimal collection, and a real right to deletion.

BUILT FOR

CCPA & GDPR principles

Access, export, and delete your data anytime — the rights those laws demand are simply how Verity works, for everyone.

Security practices

Encryption everywhereTLS 1.3 in transit, AES-256-GCM at rest, unique key per user.

Least-privilege accessNo Verity employee can read your transcripts. Production access requires hardware keys.

Own servers, own rulesNo third-party AI service ever receives your audio or transcripts.

Your delete means deleteAccount deletion purges every transcript within 30 days — backups included.

Dictée vocale pour tous

Does Verity work with all apps ?

Yes. Verity works at the system level, so it injects text into any app — email clients, document editors, messaging apps, web browsers, code editors, and more.

Is there a learning curve for voice commands ?

No. Voice commands follow natural speech patterns — 'new paragraph', 'delete last word', 'select all'. Most users are productive within minutes.

Can I use Verity with one hand or without a mouse ?

Yes. Verity is designed to work entirely with your voice — start and stop recording, navigate, edit, and send without touching keyboard or mouse.

Is the accessibility mode free ?

Core voice input is available on all plans including the free tier. AI formatting and polishing require a Pro subscription.

FAQ sécurité

Is Verity HIPAA compliant?

Not today. HIPAA support, including Business Associate Agreements, is on our roadmap. Verity already processes audio with zero retention and encrypts everything in transit.

Où sont stockées mes données ?

Puis-je demander un rapport d'audit de sécurité ?

Comment mes transcriptions sont-elles chiffrées ?

Que se passe-t-il en cas de brèche de données chez Verity ?

Comment supprimer toutes mes données ?

SOC 2 certification is on our compliance roadmap. We are not currently certified. Our security practices include zero-retention processing, TLS 1.3 everywhere, and encrypted storage.

Where your voice goes. And where it doesn't.

Data practices at a glance

Where we stand on compliance

SOC 2 Type II

PIPEDA & Law 25

CCPA & GDPR principles

Security practices

Dictée vocale pour tous

Voice-first input

Full keyboard navigation

Screen reader compatible

FAQ sécurité

Your words. Your rules.

Where your voice goes. And where it doesn't.

Data practices at a glance

Where we stand on compliance

SOC 2 Type II

PIPEDA & Law 25

CCPA & GDPR principles

Security practices

Dictée vocale pour tous

Voice-first input

Full keyboard navigation

Screen reader compatible

FAQ sécurité

Your words. Your rules.