Data and security

Documents and the database are stored in London. The app runs in the Netherlands, in the EU. The Subprocessors page lists every company that processes data for Vedas, and where.

Only people in your firm. The database keeps each firm's data apart and checks this on every request. Vedas staff don't see or work on your firm's jobs.

They're kept while the job is open. Once you mark a job final or cancel it, its documents are deleted after your firm's retention period: 7, 30 or 90 days, 30 by default. Partners and Admins set it in Settings, Firm. The outputs, such as the workbook and the pack, are kept.

If no one at your firm signs in or uses Vedas for 60 days, we delete its documents and outputs. After 6 months with no use, we close the account and delete all its data. We email your firm's Partners at least 14 days before either step, so you can sign in to stop it.

A job that finished but was never unlocked has its documents deleted 30 days after it finished.

No. Every request to an AI model is sent under zero data retention, and training on the data is refused. A check in our code blocks any request that doesn't meet both rules.

The models that read documents see them in full and run in the EU, with no fallback. When a file is uploaded, a model that sorts files sees only a short sample of its text, with amounts, dates and other digits masked, and the client's name and what the business does. That model isn't limited to the EU.

Only public facts. An agent may check what a company does at Companies House, or cite HMRC guidance on GOV.UK beside a question. Vedas sends only the company's name or a fixed topic, never an amount, a date, a person's name or a document.

Yes. Data travels over encrypted connections, and our hosting providers encrypt it at rest. Your clients' tax references are also encrypted by Vedas itself.

Only the ones it needs to work: one that keeps you signed in, one that remembers your light or dark theme, and a short-lived one used during some sign-ins. No advertising or tracking cookies, so there's no cookie banner.

Email hello@vedas.cloud with what you found. Please don't include client documents or figures. We reply as soon as we can.

See Security and data for more.

Read our privacy notice. For firms, our Data Processing Agreement sets out how we process your clients' data for you, and the Subprocessors page lists who helps us.