VeryDet

VeryDet is a private risk information platform designed for financial institutions, SOFOMEs, SOFIPOs, SOCAPs, and human resources departments in Mexico.

What problem does it solve?

Today, thousands of financial institutions share personal data of clients and employees through WhatsApp groups and informal files to report fraud, payment defaults, or job terminations. This practice exposes organizations to administrative sanctions for violating the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), criminal liability for disclosing secrets, civil lawsuits for moral damages and defamation, and loss of institutional credibility with the authorities.

What is VeryDet?

VeryDet replaces informal blacklists with an institutional system where each report is backed by a legal document, a SHA-256 cryptographic hash, and an immutable timestamp. We don't label people: we report verifiable facts with a documented chain of custody.

Key features:

- Biometric authentication with FIDO2 and WebAuthn with liveness detection. Each query and upload is biometrically signed by an authorized user.

- End-to-end encryption. Documents are encrypted on the client's device before leaving the system. Neither VeryDet nor its technical staff can access the content. AES-256 encryption is used at rest, and TLS 1.3 encryption in transit.

- Immutable log. Every action generates an auditable, timestamped record. It is known exactly who accessed what, when, and under what authorization.

- Document verification filter. We eliminate free text. The reporting party chooses a predefined category and attaches the supporting document: a promissory note or signed contract for non-payment, a police report for proven fraud, or a termination letter or administrative record for job termination.

- Operational ARCO rights. A portal for affected parties where any citizen can verify their information, challenge reports, and exercise their rights of Access, Rectification, Cancellation, and Opposition. If the source does not respond within 72 hours, the record is automatically deleted.

- Reciprocity model. Only those who contribute have access, and only those who sign contribute. Each participant is jointly responsible for the accuracy of the information.

For financial institutions:
- Reports with chain of custody documentation
- Institutional consultation with biometric signature
- Indemnity clause and disclaimer of liability
- Integration with existing KYC and onboarding workflows

For recruiters and HR departments:
- Termination reports backed by administrative record
- Consultation authorized by the candidate via biometrics
- Background check certificate generated on demand
- Privacy notice aligned with the stated purpose

Regulatory compliance:
- Designed to comply with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) from its architecture
- Registered privacy notice
- Privacy impact assessment aligned with INAI regulations
- Roadmap towards ISO 27001 certification

VeryDet operates as a digital notary, not as a judge. Each step is designed to shift the responsibility for accuracy to the data provider and ensure technical traceability.

Make your institution a VeryDet accredited entity.