Security
Last updated: October 18, 2026. Applies to: SimVeritas, including www.simveritas.com and the SimVeritas application.
Anukaran LLC (“we”, “us”) operates SimVeritas. This page describes how the SimVeritas website and application are currently built and run to protect the information you give us, and how to report a suspected security problem.
1. Encryption and hosting
SimVeritas runs on Google Cloud. All connections to the website and the application are encrypted in transit using HTTPS.
2. Account access
Accounts are by invitation only. You can sign in with Google, Microsoft, or your email address. Passwords are never stored in readable form; we store only a one-way hash. Access within the application is role-based.
3. Credentials
Our service credentials are kept in managed secret storage on our servers and are never sent to your browser.
4. Data
Every patient and case in SimVeritas is fictional, and you must not enter or speak real patient information (see our Terms of Service and Educational Use Notice). We do not store audio from simulations. For what we collect and which services process it, see our Privacy Policy.
5. Responsible disclosure
If you believe you have found a security vulnerability in SimVeritas, please report it to security@simveritas.com. We aim to acknowledge reports within 5 business days.
- Please give us reasonable time to fix the issue before any public disclosure.
- Do not access, change, or delete other users’ data.
- Do not degrade or interrupt the service.
- Do not use automated scanning that disrupts the service.
We do not offer a bug bounty.
Contact
Security reports: security@simveritas.com. Everything else: hello@simveritas.com. Anukaran LLC, Dayton, Ohio, USA.