Data residency
Customer data stays in the client's jurisdiction.
Veritrel is built for institutions that may not send customer information outside their own environment. We deliver the data to the client, and screening takes place there.
Our approach
The data is used where the client is regulated.
Many providers of screening data require clients to send customer records to an external system for checking. Veritrel does not. We deliver the data itself, and the client holds and uses it within its own systems and its own jurisdiction. Customer information never leaves the client's environment, and Veritrel has no means of receiving it.
For this reason Veritrel does not provide a conventional data API. The following are deliberately not part of our service:
- A hosted search or screening interface
- A query or lookup API that accepts names or identifiers
- Any channel for receiving a client's customer records
For connected systems
Direct delivery
When a list is amended, Veritrel sends the client's system a signed notice that contains no data. The client's system then collects the new version from Veritrel, verifies it and confirms that it has been applied. All connections are opened by the client and authenticated with the client's own key.
For isolated networks
Offline delivery
For systems without an external connection, Veritrel prepares a signed bundle that the client transfers by its own approved means. The bundle is verified in the same way as a direct delivery, and a signed confirmation is returned to Veritrel.
In practice
What moves, and in which direction.
| Where the data is used | Inside the client's own systems, on the client's premises or in the client's chosen cloud region. |
|---|---|
| Who opens connections | The client's system. Veritrel sends only a short signed notice that an update is ready. |
| What Veritrel receives | A signed confirmation that a delivery has been applied. It contains no customer information. |
| Where Veritrel is hosted | Singapore. Original source files and sensitive fields are encrypted before they are stored. |
Integrity
Every delivery can be verified by the client.
Clients do not need to rely on our assurance. Four checks are made by the client's own system before any record is used, independently of Veritrel.
| Signature | Each delivery is signed with an RSA-3072 key held in a hardware security module. The client verifies the signature before opening the delivery. |
|---|---|
| Completeness | The delivery lists the size and SHA-256 fingerprint of each of its parts. A part that does not match is rejected. |
| Sequence | Each version follows the previous one exactly. If a version is missing, the client's system waits for it and does not skip ahead. |
| Currency | Each delivery carries a deadline. Data that arrives after its deadline is marked as out of date. |
Contact
Speak with the Veritrel team.
Coverage, integration and commercial terms are agreed with each organisation. Please write to us and the appropriate member of our team will reply.
Write to enquiry@veritrel.comSOFT TASK PRIVATE LIMITEDWoodlands Link, #04-33
Singapore 738733
| General enquiries, setup and pricing | enquiry@veritrel.com |
|---|---|
| Data protection and record corrections | data@veritrel.com |
| Security reports and urgent matters | critical@veritrel.com |
| Billing | billings@veritrel.com |
| Legal and formal notices | administration@veritrel.com |