The Burden of Proof
The decision may have been sound. The record no longer shows why.
When a regulator or a tribunal asks why, the record is incomplete, undated and scattered across systems nobody can reconcile.
Multi-jurisdictional risk detection and intelligence
Decisions you cannot prove. A pay gap you cannot see. Risk you hear about as a claim. Personal data you should not be holding. And a set of tools that have never spoken to each other. Vero exists for these five. Start with whichever one you recognised first.
What Vero Is For
Five exposures, in roughly the order organisations discover them. Each is set out as the problem it is - what it looks like from the inside, and what it costs for as long as it goes unaddressed.
The decision may have been sound. The record no longer shows why.
When a regulator or a tribunal asks why, the record is incomplete, undated and scattered across systems nobody can reconcile.
The transposition deadline has passed, and not every member state has met it. The question is whether you can explain the number when you are asked.
A headline percentage once a year, no way to decompose it, and an equal-value comparison your job structure was never built to withstand.
Risk arrives as a claim, a resignation or an audit finding. Almost never as a warning.
The work authorisation approaching expiry, the review that slipped, the case drifting past its milestone. None of it is hidden - it is just nobody's job to notice.
You hold more than you should, because that appeared to be the price of knowing anything at all.
Employee records sprawl across systems, exports and analyst spreadsheets. Data minimisation says one thing; the practical demands of analysis say another.
Pay, policy, safety and employee relations each have a tool. None of them has the picture.
Every tool is defensible on its own. The exposure lives in the connections between them, which nobody owns and no single system is positioned to see.
Most organisations recognise all five. They rarely arrive one at a time.
Problem 01Defensibility
The decision may have been sound. The record no longer shows why.
Pay, grading and employee relations decisions get made every week by people acting in good faith on the information in front of them. Months or years later, someone asks why. By then the reasoning lives in an inbox, the figures live in a spreadsheet whose author has left, and nothing records who decided what, when, or on what basis. A challenge becomes reconstruction rather than retrieval, and leaders start to doubt whether their judgement will survive being questioned.
What It Looks Like
Answering one query means chasing three people, two mailboxes and a file whose owner has moved on. The answer is assembled, not looked up.
The numbers exist, but nothing records when they were produced or by whom. In a hearing, evidence nobody can date carries almost no weight.
Two teams hold two figures for the same population, and neither can say which one the decision was actually based on.
The further back you look the less there is - which is precisely the direction scrutiny travels.
What It Costs
Not fines. Something quieter and more expensive.
Preparing a single response pulls exactly the people you least want taken off their day job, for longer than anyone budgeted.
Cases get conceded not because the decision was wrong, but because demonstrating it was right is no longer possible.
When the record cannot be relied on, the safe move is to defer. Good judgement goes unexercised because it cannot be evidenced.
The Test
If any of these takes more than a moment, the exposure is not theoretical.
“A decision can be sound and still become indefensible once its basis can no longer be shown.”
Problem 02Pay Equity & Equal Value
The transposition deadline has passed, and not every member state has met it. The question is whether you can explain the number when you are asked.
EU Member States were required to transpose the EU Pay Transparency Directive by 7 June 2026; several, Ireland among them, have not yet done so. Where it is transposed, reporting obligations begin from 7 June 2027 for organisations with 150 or more workers, and national requirements vary. The pressure is no longer one universal reporting date. It is being able to explain pay decisions against objective criteria and answer requests consistently. Most organisations can produce a headline percentage and nothing beneath it. And equal value is assessed on the work rather than the job title, which means the comparison that matters is not the one most job structures were designed to survive.
What It Looks Like
One percentage, produced annually for a report, that nobody can break down into where it actually comes from or which populations drive it.
A claim pairs dissimilar roles of comparable value. Few organisations know which of their own roles could credibly be put side by side.
No way to model what closing a gap would cost, or over what horizon, before committing to it in public.
Under the Directive, an employee is entitled to ask how their pay compares. The answer has to be correct, and consistent with the one their colleague receives.
What It Costs
A question that gets harder to answer for every month it waits.
Disclosure without decomposition invites precisely the follow-up questions you have no answer to, in public, on the record.
An unexamined gap does not hold still. It widens with every hiring round, promotion cycle and off-cycle adjustment.
The Directive's timetable is set, even where national law is still to come. The structural work that precedes a credible answer is measured in quarters, and it cannot be done in reporting week.
The Test
If any of these takes more than a moment, the exposure is not theoretical.
“The question is no longer whether somebody will ask about your gap. It is whether you can answer them.”
Problem 03Early Warning
Risk arrives as a claim, a resignation or an audit finding. Almost never as a warning.
Nearly every people risk announces itself well before it lands. A work authorisation approaches expiry. A review slips. A case drifts past its milestone. A repeated grievance starts to look like a pattern. None of this is concealed and none of it is sudden. It is simply nobody's job to notice, so the window in which acting would have been quiet, cheap and uncontroversial closes without anyone marking the date.
What It Looks Like
The information is already in a system. It sits there waiting for somebody to think to go and look for it.
A quarterly review means up to three months of drift discovered all at once - or discovered by somebody outside the organisation first.
Statutory deadlines are visible years ahead and still land as a scramble, because nothing counts down to them.
The third similar grievance is the point it becomes a pattern. It is also, by then, the point it becomes disclosable.
What It Costs
The same issue, priced at two very different moments.
Caught early, it is a conversation. Caught late, it is a procedure, a paper trail and possibly a third party.
An expiry you can see is an errand. An expiry you missed is a breach, and it is now on somebody's report.
Silence gets read as good news. It holds as an assumption right up to the moment it very publicly does not.
The Test
If any of these takes more than a moment, the exposure is not theoretical.
“There is nearly always a moment when the problem was still small. The only question is whether anybody was looking at it then.”
Problem 04Privacy by Design
You hold more than you should, because that appeared to be the price of knowing anything at all.
Understanding your workforce looks like it requires holding named records, so employee personal data accumulates - across systems, exports, and spreadsheets on individual laptops. Data minimisation and purpose limitation say one thing. The practical demands of analysis say another. The tension goes unresolved, exposure grows in the space between them, and every unaccounted-for copy makes a promise of confidentiality less credible to the people whose data it is.
What It Looks Like
The same employee exists in a dozen places, several of which are a spreadsheet nobody has opened since the person who made it left.
Records outlive their purpose because deletion is somebody's project and nobody's priority, and keeping them costs nothing visible.
Every question answered outside the system of record creates one more uncontrolled copy, and each copy is permanent in practice.
Processing happens because it turned out to be useful, not because a lawful basis was established and written down first.
What It Costs
Exposure that scales with every copy, and questions you decline to ask.
One incident reaches as far as the copies extend, and nobody can state with confidence how far that is.
You are obliged to disclose everything you hold about someone, which first requires knowing everything you hold.
Reasonable questions go unasked because the data handling they would imply is not something you would want to defend.
The Test
If any of these takes more than a moment, the exposure is not theoretical.
“Insight and minimisation get treated as a trade-off. They only are one if you accept the terms the question was framed in.”
Problem 05The Space Between Tools
Pay, policy, safety and employee relations each have a tool. None of them has the picture.
Each domain was solved on its own terms - by a different team, at a different time, often in a different country and under a different rulebook. Every one of those tools is defensible in isolation. The exposure lives between them, in the connections nobody owns, because seeing them requires standing somewhere the organisation chart does not have a seat. The result is not merely untidy reporting; it is a board-level question that nobody can answer reliably.
What It Looks Like
Ireland, the EU, the UK and the US each held separately, with no consolidated view and no reconciliation between them.
Headcount depends on which system you ask, and every number downstream quietly inherits the discrepancy.
A grading drift, a pay gap and a cluster of grievances are frequently one story, told in three places, to three different audiences.
Every board pack is rebuilt by hand from parts that do not quite fit, and every rebuild is a fresh opportunity to be inconsistent.
What It Costs
Every system working as intended, and still no answer.
Nobody can say how you stand overall, because 'overall' is not something any individual tool was built to hold.
The week goes on making figures agree with each other rather than on acting on what they say.
The pattern that actually matters is the one no single system is positioned to notice, so it goes unnoticed by all of them.
The Test
If any of these takes more than a moment, the exposure is not theoretical.
“Every tool can be working exactly as designed while the organisation remains unable to answer a single question about itself.”
A short, guided walkthrough - job architecture, pay equity, compliance and risk, on one defensible data layer.