# vera.ink

> vera.ink checks a document against a pack of rules taken from the source itself — legislation, a standard, or
> official guidance — and returns the gaps it finds, each with the exact clause it rests on, the quoted source text, and
> replacement wording. With a pack, every reported finding is tied to a stored rule and its quoted source, so
> you can check it yourself.

vera.ink is a review aid, not a certification. Every pack states what it does not check. It reviews the document,
not the organisation or system behind it.

## What it checks

- **Website privacy policies and cookie notices against UK GDPR and PECR.** Rules from legislation.gov.uk and ICO
  guidance: what Article 13 requires a notice to contain, the plain-language duty in Article 12, valid consent
  under Article 7, and the cookie rules in PECR regulation 6. UK only; reviews the document only.
- **Web accessibility against WCAG 2.2** (levels A and AA). Declared gap: success criterion 3.3.4 is not checked.
- **Web application security against the OWASP Top 10:2025.** Reviews code and configuration; not a penetration
  test.
- **API security against the OWASP API Security Top 10:2023.** Not a penetration test.
- **Security headers and transport settings against OWASP guidance.** Declared gap: Referrer-Policy.
- **US severance agreements against the OWBPA / ADEA waiver requirements.** Declared gap: group termination
  programmes.

Each check has its own page with its sources and declared gaps: https://vera.ink/check
- [UK GDPR and PECR privacy policy check](https://vera.ink/check/uk-gdpr-privacy-policy)
- [WCAG 2.2 accessibility check](https://vera.ink/check/wcag-2-2)
- [OWASP Top 10:2025 check](https://vera.ink/check/owasp-top-10)
- [OWASP API Security Top 10:2023 check](https://vera.ink/check/owasp-api-top-10)
- [Security headers and transport check](https://vera.ink/check/security-headers)

Anything not on this list can be built as a new pack: describe what it must cover and the jurisdiction, and
vera.ink fetches official sources, extracts the rules, and checks every rule's quote word for word against the
page it cites before using it.

## How to use it

- **In the browser:** sign in at https://vera.ink, paste or upload a document, choose a pack. Output as DOCX with
  tracked changes, PDF, or text.
- **From an AI assistant (MCP):** remote server `https://vera-mcp-production.up.railway.app/mcp`, authenticated
  with a `vk_` API key from https://vera.ink/api-keys. Tested end to end in Claude Code; works in Cursor and any
  MCP client that can send an Authorization header. Listed in the official MCP Registry as `ink.vera/vera`.
  Setup: https://vera.ink/developers

## Pricing

Free accounts include 40 credits. A document check costs 3–8 credits depending on length; asking a pack a
question costs 2. Details: https://vera.ink/pricing

## Company

Operated by iWantIt (Pty) Ltd, South Africa. Contact: simon@vera.ink.
- [Privacy policy](https://vera.ink/privacy)
- [Terms](https://vera.ink/terms)