What VERIDEX does today

Identity and directory

Start from the right person

Every case begins with a person you choose from your own Microsoft Entra ID directory. Results are ranked candidates; none is ever picked for you.

• Directory search and browse

  Available

  Search by name, work email or employee number, then browse the full result set for that search without a ceiling.

• Directory profile

  Available

  Organization, contact, location and institutional attributes for the exact person, read live from the directory.

• Derived identity information

  Available

  Where a profile holds an Italian Codice Fiscale, VERIDEX checks its structure locally and decodes it, resolving the birthplace against the official municipality list. The result is labelled derived: a reading of the record, never an official verification.

• Directory graph context

  In development

  Group memberships, devices, licences, manager, reports and roles for internal investigations. It exposes sensitive internal attributes, so deployments should limit it to what the purpose needs.

Evidence collection

Collect from many sources, deliberately

Opening a page never collects anything. Every collection is an explicit action inside a case, and every result is stored with its source and the time it was captured.

• Instagram public evidence

  Needs a configured provider

  After you select a candidate account, collect its public profile, recent posts and comments as a dated snapshot. Each run is a new historical record. Stories are not collected.

• Instagram candidate pool

  Available

  Import a dataset of candidate accounts to choose leads from. The pool is currently shared across investigators.

• Candidate enrichment

  Off by default

  Batch enrichment of candidates with public profile data, limited to operators your deployment names. Nobody is allowed by default.

• Phone and messaging signals

  Needs a configured provider

  Choose one of the subject’s current directory numbers and collect public messaging-app presence and web signals for it. The number and raw results are stored encrypted. No login, contact sync or messaging takes place, and breach-data and carrier lookups stay off unless explicitly enabled.

• Public-web live search

  Needs a configured provider

  A bounded search across the domains your deployment approves, reading a few pages and keeping short excerpts with their match signals.

• Institutional website index

  Needs a configured providerto build the index

  A local index of your institution’s own website. Searching it inside a case makes no live provider call. Coverage is incomplete by design.

• Research agent

  Needs a configured providerdemo agent built in

  A model-planned research run with platform-enforced source rules, budgets and per-destination disclosure approval. You can pause, resume or stop it at any time.

Human review

Nothing is analysed until you approve it

Evidence Review is where a person decides. Analysis reads only what has been approved, so the review step shapes everything that follows.

• Approve, reject or leave pending

  Available

  Decide on each collected item individually. Web and index candidates can be attached to the case or rejected.

• One decision per item

  Available

  The same content collected again shares the decision already made, instead of asking you twice.

• Audit log

  Available

  Every review decision is appended to an event log that is never rewritten.

Analysis

From evidence to cited findings

Analysis runs in stages, each building only on what the previous stage validated. No stage ever produces an automatic identity verdict.

• Evidence-scoped findings

  Available

  Approved evidence is prepared and analysed in checkpointed batches. Identical batches are reused rather than sent to a provider again.

• Synthesis

  Available

  Cited claims built only from findings that passed validation.

• Person analysis

  Available

  Claims about the person, each graded supported, partially supported, unsupported or rejected, and each citing the exact evidence behind it.

• Structured profile

  Available

  A baseline captured directly from the directory, kept separate from analytical claims.

• Visual evidence inventory

  Available

  Eligible images from the directory and collected sources, de-duplicated and listed with their origin.

• Visual AI analysis

  Off by default

  Multimodal analysis of images you select. Off unless your deployment enables it.

How AI is bounded in VERIDEX

AI Assistant

Ask your case. Get cited answers.

The assistant answers from the case’s own data through a fixed set of tools, and shows where each answer comes from.

• Cited answers

  Availabledemo model by default

  Answers are checked against the context the tools retrieved and cite the case items they rely on.

• Caveats on weak ground

  Available

  The assistant can see unreviewed leads but labels them, and adds a caveat whenever an answer leans on something unreviewed or rejected.

• Web search with consent

  Off by default

  External web search runs only after you approve a specific disclosure for a specific message.

More on the assistant

Reports

Two reports, three languages

Reports are rendered once, at completion, from a fixed evidence snapshot. Opening or downloading one never calls a provider.

• AI Personal Intelligence Report

  Availabledemo author by default

  A profile plus a written assessment covering identity, education, work, geography, digital presence, interests, correlations, conflicts, reliability and open questions, with a cited source catalogue. Generated only when you ask for it.

• Comprehensive Evidence Report

  Available

  A deterministic record of the profile, coverage by source and every item with its review status and provenance. It never uses an AI provider.

• Italian, English and Arabic

  Available

  Both reports are available in all three languages, with right-to-left handling for Arabic.

Email campaigns

An optional, gated module

Separate from investigations. Where your institution enables it, an operator can reach an audience built from directory attributes, under an approval process.

• Audience and template

  Off by default

  Build an audience from directory attributes plus direct recipients, and pin a specific version of an email template.

• Review and approval

  Off by default

  Each campaign moves from purpose and audience through review, approval and preview before it can be sent.

• Guarded sending and tracking

  Off by default

  A send guard that fails closed, sending limited to named operators (nobody by default), and delivery tracking.

Deliberately absent

What VERIDEX does not do

• It never states that a profile, phone response or web page belongs to the subject.
• It never signs in to anyone’s accounts, syncs contacts or sends messages to the subject.
• It never collects anything because a page was opened.
• It does not support shared team access to a case yet. Each case has one owner.