Privacy Policy

VeriTrust is built on the principle of Zero-Knowledge. We mathematically cannot read or store your documents.

1. Zero-Knowledge Architecture

When you sign or verify a document on VeriTrust, the file never leaves your device. All cryptographic hashing (SHA-256) and ECDSA signature generation is executed locally within your browser's secure context. Our backend servers only receive the resulting mathematical hash and public key data.

2. Ephemeral Vault Storage

If you use our Premium Ephemeral Vault feature, your structured data is stored in our database for the exact duration of the timer you set (e.g., 24 hours). The moment that timer expires, an automated database trigger permanently deletes the payload. There are no backups of this ephemeral data.

3. Public Ledger Transparency

The only data VeriTrust stores persistently is non-sensitive cryptographic metadata required for verification:

  • Institutional Public Keys (Registered in our directory)
  • Document Hashes (Irreversible 64-character strings)
  • Digital Signatures (Mathematical proofs)

It is mathematically impossible to reverse-engineer a document hash back into the original PDF.