Skip to content

Legal & Compliance

Veridas has a Personal Data Protection Policy, which includes the company's commitment to compliance with data protection regulations.

Veridas has conducted a Data Protection Impact Assessment (DPIA), in accordance with the General Data Protection Regulation (GDPR), to better understand all the particularities of the processing involved in its identity verification services. The DPIA includes the analysis of the VeriSaaS Cloud infrastructure and of its cloud providers. The executive summary of the DPIA is available to Veridas customers on request.

Certifications

Veridas holds the following certifications and reports:

  • ISO/IEC 27001 - Information security management.
  • ENS - Spanish National Security Framework (Esquema Nacional de Seguridad).
  • SOC 2 - Report on controls relevant to security.

Cloud providers

VeriSaaS Cloud is hosted on Amazon Web Services (AWS) and Google Cloud. Both providers act as sub-processors and hold the main international security certifications, including ISO/IEC 27001 and SOC 2.

For more information, please see veridas.com/en/compliance.