# Cloud getting started

Kind

tutorial

For

developer · operator

Verified against

Veritio Cloud public claims · 2026-08-09 · @veritio/core@0.4.7

This tutorial validates the managed boundary with one non-sensitive canary event. Use the exact ingest URL and secret shown by your console; do not infer or hard-code an undocumented route.

## 1\. Create the project

[Section titled “1. Create the project”](#1-create-the-project)

Sign in to the Cloud console, create or select the organization, and create a project dedicated to the environment you are testing. Record the public project identifier in normal configuration. Do not put the secret key in source control.

Before continuing, confirm your account can see the project and that switching to another project changes the visible evidence boundary.

## 2\. Issue an ingest-scoped key

[Section titled “2. Issue an ingest-scoped key”](#2-issue-an-ingest-scoped-key)

Create a key limited to ingest for that project. Copy the secret once into your server-side secret manager and store the console-provided ingest URL beside it.

Use two process variables at the host boundary:

Terminal window

```sh
VERITIO_INGEST_URL='paste-the-console-provided-url'
VERITIO_INGEST_KEY='paste-the-ingest-scoped-secret'
```

Never expose either value through browser bundles, public logs, exception text, or client-visible environment prefixes.

## 3\. Create a known event

[Section titled “3. Create a known event”](#3-create-a-known-event)

Use the [record-first-event fixture](/docs/start/record-first-event/) or your SDK’s equivalent to create a normalized event with:

-   a new stable canary event ID;
-   the intended application tenant/workspace scope;
-   a non-sensitive target ID;
-   minimized metadata such as `{ "source": "cloud_canary" }`;
-   a stable idempotency identity reused only for retries of this exact event.

The host—not a browser request body—must choose the Cloud project credential and trusted tenant mapping.

## 4\. Deliver with a bounded failure policy

[Section titled “4. Deliver with a bounded failure policy”](#4-deliver-with-a-bounded-failure-policy)

Send the SDK-created event through the documented ingest client or the exact console-provided endpoint. Apply a request timeout. Treat success only as a transport/ingest acknowledgement; retain the canary ID for the read-back check.

For evidence that must not be lost, write a durable outbox entry in the same application transaction as the business mutation. Retry `429` and transient server/network failures with bounded exponential backoff and jitter. Route permanent authorization, scope, or validation failures to an operator-visible dead-letter state rather than retrying forever.

## 5\. Read back the evidence

[Section titled “5. Read back the evidence”](#5-read-back-the-evidence)

Open the selected project’s evidence view and locate the canary by event ID. Confirm all of the following:

Check

Expected

Project

Exactly the selected project

Event ID

Exact canary ID

Action and target

Match the sent normalized event

Metadata

Only the allowlisted canary metadata

Duplicate retry

One logical record, not two

If the event appears under another project or contains unexpected metadata, stop the integration and rotate the key.

## 6\. Prove revocation

[Section titled “6. Prove revocation”](#6-prove-revocation)

Revoke the test key in the console. A later request using that secret must fail authorization and must not create a record. Confirm the original canary remains readable according to your account and project permissions.

## Production gate

[Section titled “Production gate”](#production-gate)

Do not launch until your integration test covers valid ingest, identical retry, conflicting retry, invalid project/key, revoked key, timeout, server failure, outbox replay, and read-back. Keep the public [claims registry](https://getveritio.com/claims.json) verification date with your release evidence.

Next, request and independently verify a [Cloud export](/docs/cloud/exports/).

[Edit page](https://github.com/getveritio/veritio-website/edit/main/src/content/docs/docs/cloud/getting-started.md)

Last updated: Aug 23, 2026

[Previous  
Cloud overview](/docs/cloud/overview/)[Next  
Exports](/docs/cloud/exports/)

Veritio provides evidence support, not legal advice or automatic compliance.

This site uses cookieless, anonymous analytics (Umami) by default. With your consent, we also enable Google Analytics, which sets cookies and sends usage data to Google. [Privacy Policy](/legal/privacy/)