Security and data protection

Drawings and manuals are sensitive. Here's how we look after them.

Your documents are stored in Stockholm. AI calls may be processed outside the EU, without the provider keeping them. This page covers who can read what, how every change is logged and what Verkio does and doesn't promise.

Try it freeInformation for your IT department

Your documents stay with youDrawings and manuals are sensitive.

Stored in Stockholm

Database, files and search index are in Stockholm. AI calls may be processed outside the EU, but the provider doesn't keep what is sent.

Nobody reads without permission

We at Verkio can't see your machines or documents. If you need help, you give us read access for a limited time, and every visit is logged.

You make the decisions

The AI writes drafts and only a person can approve them. Verkio never certifies that a machine meets the requirements. You do.

In detailHow Verkio is built to keep your documents with you.

Stored in Stockholm

The database, files and search index are hosted by Supabase in Stockholm, and the servers that process them run on Vercel in Stockholm.

Documents are kept in private storage. Each file sits under its organisation, and the database checks membership before anyone can read it.

AI calls that aren't stored

The assistant sends the AI model only the parts of your documents the question needs, through Vercel AI Gateway. The calls are made with zero data retention: the provider keeps neither questions nor answers and doesn't train its models on them.

The AI models may run outside the EU. Get in touch if your organisation needs the AI calls processed within the EU as well.

Organisations kept apart

Every row in the database belongs to an organisation, and the database itself checks on every query that whoever is asking is a member. That includes the searches the assistant runs for you.

The organisation's admin decides who the members are and what role they have.

Time-limited support access

We at Verkio see names, counts, activity and cost, but never your machines, documents or hazards.

If you need help with a machine, an admin in your organisation gives us read access for a set time, say 72 hours. With it we can read but not change anything, and your admin can withdraw it at any time.

Every time we open your organisation it's logged, and the log shows in your settings.

You approve, not the AI

Everything the assistant writes is saved as a draft along with the sources it rests on. A suggestion without a source shows as an assumption.

Only a person can approve. The assistant has no tools to approve, delete or change anything already approved, and Verkio never certifies that a machine meets the requirements.

Every change is logged

Verkio records who added, changed or removed what, and when. The review package shows who approved each hazard and each checklist item.

Sign-in without passwords

You sign in with a code sent to your email that's valid for an hour, or with your Microsoft account. There are no passwords to guess or leak.

Nothing that identifies you is shared

Your machines, documents and hazards are visible only to your organisation. The only thing other customers ever see is approved hazards stripped of names and details that could identify you, and only after a person at Verkio has reviewed them. As a customer you can turn this off.

Deletion

If you delete a document, a machine or the whole organisation, the files go with everything else. A trial that doesn't become a customer is deleted 30 days after it ends.

What Verkio promises and doesn't

Verkio promises that every suggestion is a draft, with a source or marked as an assumption, that nothing counts until a person has approved it and that every change is logged.

Verkio doesn't promise that the AI finds every hazard, and never certifies that a machine meets the requirements or may be CE marked. Responsibility for the risk assessment, the CE marking and the EU declaration stays with you as the manufacturer.

Our liability is limited. We aren't liable for indirect losses or for losses that arise because a suggestion was approved without enough review, and in total at most for what you have paid in the last twelve months. This is a summary: what applies is in the terms.

Read the terms

Personal data

How we handle personal data is set out in our privacy policy.

For your IT department

Does IT need to review Verkio before you start? The subprocessors and where they process data, our commitments as a data processor, sign-in, permissions, logging and deletion are all on one page, ready to print or save as a PDF.

Security for IT departments