Regulatory Compliance
Verit is built with compliance in mind. Our platform helps you meet regulatory requirements while protecting your customers from fraud.
Certifications in progress: We are actively pursuing SOC 2 Type I (Q2 2026) and SOC 2 Type II (Q4 2026) certifications.
Regulations We Help You Meet
Built-in support for key financial services regulations
Red Flags Rule (FACTA)
FTC / CFPB
Requires financial institutions to implement Identity Theft Prevention Programs.
How Verit Helps
- Detects 26+ FTC-specified red flag patterns
- Documents all fraud indicators automatically
- Provides complete audit trails for examinations
- Supports reasonable policies and procedures
Fair Credit Reporting Act (FCRA)
CFPB
Governs the collection, dissemination, and use of consumer credit information.
How Verit Helps
- Verit is NOT a Consumer Reporting Agency
- We do not provide consumer credit reports
- Verification data for internal fraud prevention only
- Supports adverse action notice requirements
Gramm-Leach-Bliley Act (GLBA)
FTC / OCC / FDIC
Requires financial institutions to protect sensitive customer data.
How Verit Helps
- Encryption and access controls for all data
- Employee training on data handling
- Documented incident response procedures
- Regular risk assessments and security audits
CCPA / State Privacy Laws
California AG & others
Consumer privacy rights regarding personal information collected by businesses.
How Verit Helps
- Right to know what data is collected
- Right to delete personal information
- We do not sell personal data
- Non-discrimination for exercising rights
Built-In Compliance Tools
Features designed to make compliance easier
Complete Audit Trails
Every action logged with immutable audit trails. View who accessed what, when, and from where.
Examiner-Ready Reports
Generate compliance reports on demand. Export fraud detection statistics and Red Flags documentation.
7-Year Data Retention
Data retained to meet regulatory requirements. Audit logs immutable and retained indefinitely.
Red Flags Rule Compliance
The FTC's Red Flags Rule requires creditors to implement an Identity Theft Prevention Program. Verit provides the tools to meet these requirements.
Red Flags We Detect
Verit automatically detects red flags as defined by the FTC:
- • Alerts from consumer reporting agencies
- • Suspicious documents
- • Suspicious personal identifying info
- • Unusual account activity
- • Inconsistent application information
- • Address discrepancies
- • Identity theft reports
- • Fraudulent contact patterns
Documentation for Examiners
When regulators examine your Identity Theft Prevention Program, Verit provides:
- Documented red flag detection for each application
- Complete audit trails showing response to red flags
- Statistics on fraud detection and prevention
- Evidence of ongoing program updates
Important Notice
This page provides general information about regulatory compliance and is not legal advice. Organizations are responsible for ensuring their own compliance with applicable laws. We recommend consulting with legal counsel regarding your specific compliance obligations.