Methodology
From the official publication to the client's systems.
Every list passes through the same eight stages. A publication that does not pass our checks is held, and an analyst is alerted.
The process
Eight stages between a publication and its delivery.
- 1
Collection
Each list is retrieved from the issuing authority. The original file is archived unaltered and encrypted.
- 2
File checks
Format, size and record counts are checked before the content is read. A file that does not meet expectations is held for review.
- 3
Validation
Every value is validated. Values that fail validation are retained and marked. They are never removed or replaced with estimates.
- 4
Change detection
Additions, amendments and removals are identified by comparison with the last verified version.
- 5
Record linking
Records are linked to the same person or organisation only on firm evidence, such as a shared official identifier, and never on a name alone.
- 6
Review
Sensitive decisions are referred to trained analysts. Software may propose; analysts decide.
- 7
Release
The new version is packaged, signed in a hardware security module and announced to clients.
- 8
Confirmation
Each client's system verifies and applies the update, then confirms. A delivery that is not confirmed raises an alert.
- 15 min
- Target time from an amendment to a priority list to its delivery.
- 2 min
- Interval at which an urgent notice is repeated until the client's system confirms the update.
- Daily
- A signed confirmation is issued every day, including days without amendments, so clients know their data is current.
Integrity
Every delivery can be verified by the client.
Clients do not need to rely on our assurance. Four checks are made by the client's own system before any record is used, independently of Veritrel.
| Signature | Each delivery is signed with an RSA-3072 key held in a hardware security module. The client verifies the signature before opening the delivery. |
|---|---|
| Completeness | The delivery lists the size and SHA-256 fingerprint of each of its parts. A part that does not match is rejected. |
| Sequence | Each version follows the previous one exactly. If a version is missing, the client's system waits for it and does not skip ahead. |
| Currency | Each delivery carries a deadline. Data that arrives after its deadline is marked as out of date. |
Principles
The standards we apply to every record.
Official sources
Every record can be traced to an official publication. The source file is retained in its original form.
Complete history
Records are never overwritten. When a listing is removed, its status changes and the history is kept.
Human judgement
Software may propose a link between records. Trained analysts decide on links and on sensitive publications.
Controlled release
A publication that does not pass our checks is held for review. Nothing is released until it has been resolved.
One direction
Data moves from Veritrel to the client only. We hold no access to client systems.
Independent verification
Clients can verify every delivery themselves, without depending on Veritrel.
Contact
Speak with the Veritrel team.
Coverage, integration and commercial terms are agreed with each organisation. Please write to us and the appropriate member of our team will reply.
Write to enquiry@veritrel.comSOFT TASK PRIVATE LIMITEDWoodlands Link, #04-33
Singapore 738733
| General enquiries, setup and pricing | enquiry@veritrel.com |
|---|---|
| Data protection and record corrections | data@veritrel.com |
| Security reports and urgent matters | critical@veritrel.com |
| Billing | billings@veritrel.com |
| Legal and formal notices | administration@veritrel.com |