How Verilot is operated
Verilot is developed and operated by one person: an individual proprietor (sole trader) established in Japan, trading as KIZUNA Creation, building in public. There is no company, no team, and no investor behind it. It is currently offered free — a waitlist and a free read-only diagnostic (/check) — with no paid tier live yet.
Why disclosure is minimal today
Because Verilot has no live paid transactions, statutes that require full public disclosure of the operator's legal name, home address, and phone number for consumer mail-order sales (such as Japan's Act on Specified Commercial Transactions) do not currently apply. We keep the operator's personal details out of this public page for the same reason many independent developers do — but we will disclose them without delay to anyone who requests it in good faith, and we will add a full disclosure block here before any paid tier goes live.
If you need this for a vendor or firm review
Accounting and law firms cannot usually approve a tool on the strength of a public page alone, and a pseudonymous page is a fair objection rather than a nuisance. So: email us and we will provide, in writing and directly to you, the operator's legal name and business address, the country of establishment, the list of subprocessors and what each one receives (already public in the Privacy Policy), the retention periods we operate to, the specific court that the Terms of Service point to, and answers to a security or procurement questionnaire. If your firm needs a standard mutual NDA for that exchange, say so and we will look at it. What we will not do is pretend to be bigger than one person.
Governing law
Use of Verilot is governed by the laws of Japan, with jurisdiction and the limits of our liability set out in the Terms of Service. Consumers keep the mandatory protections of the country where they live.
Reporting a security issue
If you find a vulnerability, email kzmttkc314@gmail.com with "SECURITY" in the subject line. Include what you found, how to reproduce it, and what you think the impact is. There is no bug bounty — this is a free, pre-launch, one-person project and we are not able to pay for reports — so we will not pretend otherwise.
What we commit to: we aim to acknowledge a report within 3 business days, we will tell you our assessment and keep you posted until it is fixed or explicitly declined, we will credit you if you want credit, and we will not pursue legal action over research that follows the rules below and is reported to us first.
What we ask: test only against your own data and your own wallet addresses, do not access, modify, or exfiltrate anyone else's data, do not run denial-of-service or high-volume automated scans against the site (it runs on modest infrastructure and the scan endpoint is deliberately rate limited), do not use social engineering or physical attacks, and give us a reasonable chance to fix an issue before publishing it.
Contact / disclosure requests
For support, waitlist questions, data deletion, or to request operator disclosure details, email kzmttkc314@gmail.com. That address is the operator's working inbox and is read by a person, not a ticket system. We aim to respond within a few business days.
Data handling
See the Privacy Policy for what we collect and how it is used, and the Terms of Service for the terms of use.