Privacy Policy
We sell a product about proving what happened to data. It would be strange to be vague about what we do with yours. This describes the veriknox.ai website only.
Last updated 3 September 2026
Who is responsible for your data
The data controller is VeriKnox, Inc., a corporation registered in Delaware, United States.
For anything in this policy, including access, correction and deletion, write to hello@veriknox.ai. A person reads that mailbox.
What we collect, and why
There is one form on this site: the request-access form. It sends exactly these fields and nothing else.
| Field | Required | Why |
|---|---|---|
| First name | Yes | To address you correctly when we reply. |
| Last name | Optional | Same. |
| Work email | Yes | The address we reply to. This is the only field we strictly need. |
| Company | Optional | To understand the deployment you have in mind before the first call. |
| Phone number | Optional | Only used if you would rather we called. |
| How you heard about us | Yes | To know which channels are worth continuing. |
The form also contains a hidden field that real people never see. It exists to catch automated spam, and anything submitted in it is discarded rather than stored.
Our host records standard server logs for every request to this site, including IP address, user agent and the page requested. These are a by-product of serving the page and are not linked to form submissions.
What we do not collect
This is the part most relevant to what we sell.
- No product data. This is the marketing website. It has no connection to the VeriKnox platform, and no agent prompts, payloads, policies or evidence records pass through it.
- No third-party font requests. Our typefaces are compiled into the site at build time and served from our own domain, so loading this page does not send your IP address to a font provider.
- No advertising, no data sales. We do not sell, rent or share your details with advertisers or data brokers, and we do not run advertising or cross-site tracking pixels.
- No marketing list by default. Submitting the form starts a conversation about access. It does not subscribe you to anything.
Our lawful basis
For enquiries submitted through the form, our basis is legitimate interest (GDPR Art. 6(1)(f)): you asked a business to contact you about its product, and replying is what you would expect. You can object at any time and we will stop and delete the record.
For analytics cookies, our basis is consent (GDPR Art. 6(1)(a)), which you can withdraw at any time by clearing cookies for this site or blocking them in your browser.
Server logs are kept on the basis of legitimate interest in operating and securing the site.
Who else processes it
These are every third party that touches data from this site. There are no others, and we will update this list before adding one.
Notion Labs, Inc.
United StatesStores submitted enquiries
The request-access form writes directly to a Notion database. This is where your enquiry lives until it is deleted.
Amazon Web Services, Inc.
United StatesHosting and delivery
This site runs on AWS Amplify. AWS processes standard server and request logs, which include IP addresses, as part of serving the page.
Google LLC
United StatesWebsite analytics
Google Analytics measures aggregate page traffic. It sets cookies in your browser and is the only cookie-setting service on this site.
These providers are in the United States. Where transfers out of the UK or EEA are involved, they take place under the European Commission's Standard Contractual Clauses and the UK Addendum, together with each provider's own safeguards.
How long we keep it
If your enquiry does not lead to a commercial relationship, we delete it after 90 days. If it does, the record moves into our customer records and is governed by the agreement we sign with you.
Server logs are retained on our host's standard schedule and are not used to build a profile of you.
Your rights
Under the UK GDPR and EU GDPR you may ask us for a copy of what we hold, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Where processing rests on consent, you may withdraw it.
Email hello@veriknox.ai and we will action it within 30 days. You do not need an account, a form, or a reason. “Delete my details” is enough.
Where local law gives you a supervisory authority to complain to, you are free to use it. We would rather you told us first.
Changes
If we change how we handle data from this site, say a new subprocessor or a new field on the form, we update this page and move the date at the top. Material changes affecting people who have already written to us will be sent by email.