Privacy & Data Protection Notice

Each licensed court, tribunal or judiciary is the data controller for the case and participant data it enters into its own Verdict instance. The Verdict platform operator acts as a data processor, acting only on the court's documented instructions under the Data Processing Agreement.

Where local law requires it, the controller court appoints a Data Protection Officer and publishes that contact in its own court notice. The platform operator's data protection contact is reachable through the court's administrator.

• Identity and contact data: name, official or invited email address, telephone number where supplied, and the courtroom appellation used to address a person.
• Role and authorisation data: assigned role (judge, registrar, clerk, counsel, party, witness), court affiliation and access history.
• Case data: suit numbers, party details, pleadings, exhibits and bundles uploaded by the court.
• Proceedings data: the written record of a sitting — appearances, submissions noted, rulings, orders and timestamps.
• Technical data: authentication events, device and browser metadata, and audit logs of access to case files.

Verdict does not capture or store courtroom audio or video recordings. The official output of a sitting is a written, timestamped record certified by the court.

• Performance of a task carried out in the public interest and in the exercise of official judicial authority — the conduct of proceedings and the keeping of the court's record.
• Compliance with a legal obligation — statutory record-keeping, retention and disclosure duties.
• Contract — administering accounts issued to court officers and invited participants.
• Consent — optional, withdrawable items only, such as non-essential notifications.

Judicial data is not processed for advertising, profiling, automated decision-making, or model training, and is never sold or shared with data brokers.

Access is restricted and role-scoped. Registrars enrol only with a verified official government email address. Every other court user — including witnesses — receives an individually issued, authentication-protected link that is bound to their own account and email address, is not transferable, and can be revoked by the court. No open or forwardable meeting links exist.

Case and record data is retained for the period fixed by the controller court's retention schedule, and by default for ten years from certification of a sitting's record, in line with judicial archiving practice. Account and audit data is retained for the life of the licence plus the statutory limitation period. Full detail is in the Records & Retention Policy.

Data is hosted in managed cloud infrastructure with encryption in transit and at rest. Where a court requires data residency in a specific country, the licence records that requirement and the instance is provisioned in the corresponding region. Any cross-border transfer relies on a lawful transfer mechanism recognised in the controller's jurisdiction — for Nigerian courts, the adequacy and safeguard provisions of the Nigeria Data Protection Act 2023.

Subject to the overriding requirements of judicial independence, court record integrity and the law of the jurisdiction, a data subject may request access to, correction of, restriction of or erasure of their personal data, and may object to processing. Requests are made to the controller court, which decides them; the platform operator assists the court within the periods set by applicable law. Certified court records cannot be altered or deleted on request — a correction is entered as a further record.

A court user who is dissatisfied may complain to the controller court and, in Nigeria, to the Nigeria Data Protection Commission, or to the equivalent supervisory authority in the jurisdiction of deployment.