Veracratv2026-07-28
Legal · Terms

Terms of Service

By creating an account or using Veracrat you agree to these terms. Read section 3 and section 5 carefully — they limit what Veracrat's output can be relied on for.

1. The service

Veracrat is an AI-assisted tool that reads photographs of physical equipment and compares what the model reports against inventory records you supply. It produces provisional findings for human review.

2. Your account

  • You are responsible for activity under your account and for the accuracy of the inventory data you upload.
  • You must have the right to photograph the facilities and equipment you scan.
  • You must not upload images of identifiable individuals, credentials, or screens showing personal or confidential data.

3. Acceptable use of AI output

Findings produced by Veracrat are generated by an AI model. Models can misread, omit, or fabricate text visible in an image. Accordingly:

  • You must not present Veracrat output as sole or conclusive audit evidence.
  • A qualified person in your organisation must review and sign off every scan before it is used in a compliance process.
  • You must not remove, alter, or obscure the AI-generated labelling that Veracrat applies to exported artefacts.
  • You must not represent Veracrat as a certification body, auditor, or attestation provider.

4. No compliance guarantee

Veracrat does not certify, attest to, or guarantee compliance with SOC 2, ISO 27001, PCI DSS, HIPAA, or any other framework. References to those frameworks describe the controls the product is designed to help you gather evidence for. Whether any artefact is accepted is entirely at your auditor's discretion.

5. Warranty disclaimer and limitation of liability

The service is provided "as is" and "as available". To the maximum extent permitted by law, Veracrat disclaims all implied warranties, including merchantability, fitness for a particular purpose, accuracy, and non-infringement. Veracrat does not warrant that model output will be accurate, complete, or error-free.

To the maximum extent permitted by law, Veracrat's aggregate liability arising out of or relating to the service is limited to the fees you paid in the twelve months preceding the claim. Veracrat is not liable for indirect, incidental, special, consequential, or punitive damages, including audit failures, regulatory penalties, lost assets, or lost profits. Nothing here excludes liability that cannot lawfully be excluded.

6. Suspension, termination, and changes

We may suspend accounts that abuse the service or breach section 3. You may stop using Veracrat at any time and request deletion of your data. We will give notice of material changes to these terms; the version identifier at the top of this page indicates the current revision.

This page is maintained by Veracrat. It describes our current practices and is not an independent certification or legal advice. Questions: privacy@veracrat.com.