Security & Trust

Security and Trust at Every Step

Security is not only a feature — it is the foundation of everything we build.

Our Principles

Built on Security and Trust Foundations

We design all solutions with data minimization and user privacy at the forefront, following international standards for data protection.

User privacy is a core principle. We advocate for minimal data collection and transparent handling of personal information.

Our solutions follow secure-by-design principles, incorporating security reviews at every stage of the development process.

We build technology that serves people responsibly, with clear ethical guidelines and respect for user rights.

Our architecture planning ensures reliable, resilient systems that support uninterrupted business operations.

We stay current with regional and international regulatory requirements to help businesses remain compliant.

Security Architecture

Verify every user and entity

Fine-grained permission controls

Continuous monitoring & alerting

Standards & regulatory alignment

TLS on every API and webhook connection

Webhook notifications signed with HMAC-SHA256, with an event ID and timestamp

Sensitive identity fields encrypted with AES-256-GCM

Documents, selfies, and ePassport evidence stored in private, access-controlled, time-limited storage

Verification links and activation codes are single-use and expire automatically

Each organisation's data is logically isolated with backend-enforced authorization

Role-based access: Owner, Admin, Reviewer, and Viewer

The final verification decision is made by the backend only — the mobile app and dashboard cannot override it

Additional specifics — hosting locations and exact data retention periods — are being finalized and will be published here once complete.