Engineered for the systems that depend on it.

Every customer operates in a logically isolated environment. Data access is scoped to the requesting workspace to prevent cross-tenant access.

TLS for all connections, terminated by our cloud platform.

Application data is stored in a managed database (MongoDB Atlas) with encryption at rest. Uploaded files are access-controlled, are never served from public URLs, and are deletable on demand.

Tenant-scoped authorization, least-privilege service credentials, and a separate constant-time-compared secret for administrative endpoints.

Salted bcrypt password hashing, signed JWT sessions with a pinned signing algorithm, and rate-limited login, signup, and password-reset endpoints.

Verification, screening, and billing activity is recorded as immutable event records. Payment webhooks are signature-verified and processed idempotently.

Contracts are deletable on demand, which removes their extracted text, identified parties, generated reports, and stored file. Person-verification records auto-expire after up to 365 days; device-intelligence signals after up to 180 days.

Subprocessors are minimized and publicly disclosed; we share only the data each provider needs. Sanctions lists are matched within Verify, so party data is not sent to them.

Customer contracts, counterparty records, and verification outputs are not used to train AI or foundation models.