Privacy Notice.

The controller.

Veritas-Vault is operated by Direct Consulting Solutions SA ("DCS", "we", "us"), a Swiss société anonyme domiciled in Geneva, Switzerland. DCS is the data controller for personal data collected through this website and through engagement with the platform, unless a separate Data Processing Agreement designates a different role.

Controller

Direct Consulting Solutions SA

Registered office

Route des Jeunes 4, 1227 Les Acacias, Geneva, Switzerland

Form

Société Anonyme (SA)

Data Protection Officer

dpo@veritas-vault.com

General enquiries

enquiries@veritas-vault.com

Aggregate site analytics. Nothing else.

Veritas-Vault uses Cloudflare Web Analytics to monitor aggregate site traffic. This is a cookieless analytics layer that operates on visit-level signals only. It is hosted by Cloudflare Inc. under EU data-protection terms and Standard Contractual Clauses.

The signals collected are:

• Visit counts, per page, in aggregate
• Referrer paths — the page that linked to ours
• Country-level locale, derived without IP retention
• Browser type and operating system, in aggregate cohort form

These signals are not linked to a person. They are not used for advertising, profiling, or inference about any individual visitor.

The list is deliberate.

The following are not collected, set, inferred, or shared by Veritas-Vault at any layer of the site, the platform, or the report-delivery pipeline:

• Cookies — first-party or third-party
• IP addresses, retained or logged
• Device fingerprints or canvas hashes
• Cross-site identifiers or advertising IDs
• Third-party analytics or telemetry
• Ad-network tags or pixels
• Social-platform plug-ins or share-button trackers

Processed in transient memory.

Documents submitted to the platform for precision analysis are processed entirely in active memory within a serverless environment. They are not written to persistent disk storage at any stage of the analysis pipeline. They are not retained in any backup, snapshot, or cold-storage tier.

At the moment the analysis report is delivered to your authenticated dashboard, the source document is purged from active memory. It is not archived. There is no audit copy. There is no engineering copy. The original is yours, and only yours, once the analysis closes.

Under GDPR, UK GDPR, Swiss FADP, and POPIA.

Where you are a data subject under any of these regimes, you hold the following rights with respect to personal data that DCS may process:

• The right of access to your personal data
• The right to rectify inaccurate or incomplete data
• The right to erasure ("the right to be forgotten") where applicable
• The right to restrict or object to processing
• The right to data portability where applicable
• The right to withdraw consent at any time, where processing is based on consent
• The right to lodge a complaint with a supervisory authority

Requests under any of these rights should be addressed to the Data Protection Officer at dpo@veritas-vault.com. We will respond within the statutory window applicable to your jurisdiction.

Supervisory authorities

The competent supervisory authority for the controller is the Federal Data Protection and Information Commissioner (FDPIC) in Berne, Switzerland. Data subjects in the European Economic Area, the United Kingdom, and the Republic of South Africa may also contact their respective national supervisory authority directly.

Transfers and SCCs.

Where personal data is transferred outside Switzerland, the European Economic Area, or the United Kingdom, Veritas-Vault relies on Standard Contractual Clauses in the relevant Commission and ICO-approved forms, supplemented by appropriate technical and organisational measures. The memory-only processing substrate is the principal such measure.

For transfers into or out of the Republic of South Africa, transfers comply with the cross-border provisions of Section 72 of the Protection of Personal Information Act, 2013 (POPIA).

For data-protection enquiries.

All data-protection enquiries — access requests, erasure requests, complaints, or scoping conversations for a Data Processing Agreement — should be addressed to the DCS Data Protection Officer:

DPO

dpo@veritas-vault.com

Post

Data Protection Officer, Direct Consulting Solutions SA, Route des Jeunes 4, 1227 Les Acacias, Geneva, Switzerland