GDPR compliance, built into the foundation.
Veft is an executive search platform built in Europe for European practice: consent you can prove, AI output you can defend line by line, and retention that runs itself.
What data discipline means for a search firm
A retained search firm holds detailed profiles of senior people — careers, compensation contexts, references, assessments. Under the GDPR that data carries obligations from the day it enters the firm: a lawful basis for holding it, retention limits, the ability to answer a data subject request, and an account of what happened to it.
Most tools bolt a privacy policy onto a database built elsewhere. Veft took the obligations as design constraints: the consent machinery, the audit trail and the AI provenance are part of the data model, not an annex.
What that looks like in Veft
A consent record you can prove.
Every consent is an entry in an append-only, hash-chained ledger, with a consent microsite showing exactly what was approved, when, and from where. Withdrawal is recorded the same way and takes effect downstream.
Retention that runs itself.
Records carry deletion deadlines. When a retention period ends, erasure executes on schedule — readable personal data removed while the proof of the original consent remains verifiable.
AI you can defend, line by line.
Every field carries its provenance: drafted by AI, edited or approved by a person. A re-run never overwrites approved text. What the consultant signed off stays signed off.
European by construction.
German-native interface and documents, formal address throughout. The AI assists the consultant — it never scores or ranks people autonomously and never makes decisions about them. Data hosting and processing stay inside the EU.
Frequently asked
- Is Veft GDPR compliant?
- Veft is built to support a firm's GDPR obligations as processor: provable consent records, retention automation, audit trails, data-subject request workflows and a data processing agreement. Compliance is always shared between tool and firm — Veft gives the firm the machinery to meet its side.
- Where is Veft's data hosted?
- In the European Union. Hosting and processing stay inside EU jurisdiction; details are on the trust page and in the data processing agreement.
- Can a candidate withdraw consent?
- Yes, and the withdrawal is itself recorded in the tamper-evident ledger and enforced across the platform — including in anything generated afterwards.
- What happens on a data subject request?
- Access and erasure requests run as workflows against the record: full export of stored personal data, and erasure executed against retention rules while preserving the integrity of the consent ledger.
- Does the AI make decisions about candidates?
- No. Veft's AI drafts text, proposes matches and surfaces evidence. It never scores or ranks people autonomously and never makes decisions about them — a human reviews everything, and that review trail is recorded.
Compliance you can stop thinking about.
The point of building discipline into the foundation is that you never weigh it against the work. See it in twenty minutes.