How Verilot is operated
Verilot is developed and operated by one person: an individual proprietor (sole trader) established in Japan, trading as KIZUNA Creation, building in public. There is no company, no team, and no investor behind it. The scan at /check is free. The 2025 tax-year pack is a one-time purchase of $79, sold at /pricing through Stripe.
Why operator details are on request
The operator is a sole trader. Legal name and business address are provided in writing on request (see vendor review below) rather than printed on this page. Card payments go through Stripe; we never see the card. Refunds and the contract live in the Terms of Service. For a Specified Commercial Transactions disclosure, email support@verilot.app and we will send the same operator details we hand a firm reviewer.
If you need this for a vendor or firm review
Accounting and law firms cannot usually approve a tool on the strength of a public page alone, and a pseudonymous page is a fair objection rather than a nuisance. So: email us and we will provide, in writing and directly to you, the operator's legal name and business address, the country of establishment, the list of subprocessors and what each one receives (already public in the Privacy Policy), the retention periods we operate to, the specific court that the Terms of Service point to, and answers to a security or procurement questionnaire. If your firm needs a standard mutual NDA for that exchange, say so and we will look at it. What we will not do is pretend to be bigger than one person.
Governing law
Use of Verilot is governed by the laws of Japan, with jurisdiction and the limits of our liability set out in the Terms of Service. Consumers keep the mandatory protections of the country where they live.
Reporting a security issue
If you find a vulnerability, email support@verilot.app with "SECURITY" in the subject line. Include what you found, how to reproduce it, and what you think the impact is. There is no bug bounty — this is a one-person project and we are not able to pay for reports — so we will not pretend otherwise.
What we commit to: we aim to acknowledge a report within 3 business days, we will tell you our assessment and keep you posted until it is fixed or explicitly declined, we will credit you if you want credit, and we will not pursue legal action over research that follows the rules below and is reported to us first.
What we ask: test only against your own data and your own wallet addresses, do not access, modify, or exfiltrate anyone else's data, do not run denial-of-service or high-volume automated scans against the site (it runs on modest infrastructure and the scan endpoint is deliberately rate limited), do not use social engineering or physical attacks, and give us a reasonable chance to fix an issue before publishing it.
Contact / disclosure requests
For support, waitlist questions, data deletion, or to request operator disclosure details, email support@verilot.app. That address is the operator's working inbox and is read by a person, not a ticket system. We aim to respond within a few business days.
Data handling
See the Privacy Policy for what we collect and how it is used, and the Terms of Service for the terms of use.