Encryption
- Documents, reports and screening evidence encrypted at rest with AES-256-GCM.
- Every connection goes over HTTPS.
Security
Your KYC files, protected and traceable
A KYC file holds ID documents, wealth information and your decisions. Here is, concretely, how they are protected.
Access
- Passwords hashed with bcrypt, never stored in clear.
- Sessions of 15 minutes, renewed by an httpOnly cookie that changes on every use.
- Four roles: owner, administrator, agent, viewer.
- Request rate limits slow down automated attempts.
Isolation and traceability
- All data belongs to one organisation; no query reads outside yours.
- Every action enters the audit trail, each entry chained to the previous one with a SHA-256 hash.
- Four-eyes approval of high-risk files: the approver can never be the submitter.
Backups
- An encrypted backup every night to a separate server that refuses deletions.
- Retention: 14 days, 8 weeks, 12 months and 6 years.
- Restoring checks the integrity of the audit chains.
AI and sub-processors
- AI tasks (reading documents, analyses, memo draft) are sent to Anthropic through an asynchronous queue.
- The AI suggests, the analyst decides: nothing is validated automatically.
- The full list of sub-processors is in the privacy policy.