Privacy Policy

1. Data Architecture & Isolation

Veritas Nexum operates on a strict deterministic data architecture. The Veritas Arcus engine applies a fixed analytical ruleset to historical financial statement data. The same input always produces the same output.

Zero Probabilistic Processing

Financial data, corporate metrics, and historical statements processed by the platform are never analysed, summarised, or transformed by probabilistic models, large language models (LLMs), neural networks, or generative AI systems of any kind. All outputs are the result of deterministic mathematical operations applied to historical data.

Zero Model Training

Under no circumstances is user data, session data, or any financial data processed through the platform used to train, fine-tune, validate, or benchmark any internal or external machine learning model, AI system, or statistical model.

Logical Data Isolation

All data processed by the platform is logically isolated. No cross-contamination of data between users or sessions occurs at any stage of the processing pipeline.

2. Information We Collect

We restrict data collection to the absolute operational minimum required to deliver the platform.

Access Credentials

Username and password required to authenticate access to the platform. Passwords are not stored in plain text.

Session Data

A session cookie is set upon login to maintain your authenticated session. This cookie contains no personal information and expires when you close your browser or after a fixed inactivity period.

Access Logs

IP addresses and request timestamps are recorded in server access logs for security, rate-limiting, and abuse prevention purposes. These logs are not used for tracking, profiling, or marketing.

Enquiry Data

When you submit a Request Access enquiry via email, we collect your name, firm, role, email address, and phone number if provided. This data is used solely to respond to your enquiry and is not shared with third parties.

Report Queries

Ticker symbols submitted to generate reports are processed transiently to fetch publicly available financial statement data. These queries are cached temporarily (maximum 24 hours) to improve performance and reduce provider API load. No query history is retained beyond operational necessity.

We do not collect payment card data, biometric data, health data, or any special category personal data as defined under UK GDPR.

3. How We Use Your Data

Platform Delivery

Authentication credentials are used solely to control access to the platform.

Enquiry Response

Enquiry data submitted via Request Access is used solely to respond to your request for access and to follow up on your enquiry.

Security & Abuse Prevention

IP addresses and access logs are used to enforce rate limits, detect abuse, and maintain platform integrity.

Performance Caching

Report queries are cached to reduce latency and third-party API load. Cached data is financial market data — not personal data.

We do not use your data for advertising, profiling, behavioural analysis, or any purpose beyond those listed above.

4. Retention & Deletion

Enquiry Data

Data submitted via Request Access enquiries is retained only for as long as necessary to respond to and process your enquiry, and no longer than 12 months.

Session Data

Session cookies expire upon browser close or after a fixed inactivity period. No session data is retained on our servers beyond the active session.

Report Cache

Cached financial data expires automatically after 24 hours. No report data is retained beyond this window without a new request.

Access Logs

Server access logs are retained for a maximum of 90 days for security purposes, after which they are permanently deleted.

5. Third-Party Data Sources

Veritas Arcus sources publicly available financial statement data from third-party market data providers to generate reports. This data consists of published corporate financial statements and is not personal data.

Veritas Nexum does not guarantee the accuracy, completeness, or timeliness of data sourced from third-party providers. Users are responsible for verifying the accuracy of underlying source data before relying on any platform output.

Third-party provider data is fetched transiently and cached temporarily. It is not sold, shared, or transferred to any other party.

6. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate personal data.

Right to Erasure

You may request deletion of your personal data. We will action this within 72 hours of a verified request.

Right to Restrict Processing

You may request that we restrict processing of your personal data in certain circumstances.

Right to Object

You may object to processing of your personal data where we rely on legitimate interests as the legal basis.

To exercise any of these rights, contact us at the address below. We will respond within one calendar month as required by UK GDPR. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Contact

Veritas Nexum Ltd is the data controller for personal data processed through this platform and collected via enquiry submissions.

For data protection enquiries, to exercise your rights, or to raise a concern, please contact us at:

Veritas Nexum Ltd
Registered in England and Wales. Company No. 17230609.
Data protection contact: privacy@veritasnexum.co.uk

This policy was last updated in June 2026. We will notify users of any material changes to this policy.