Data security
Your data stays
with you.
All customer data is stored in your own infrastructure, encrypted end to end, with no central data silo.
Principles
Nothing moves without consent. The customer agrees to every share, for one purpose, and can withdraw it.
Documents stay private. You receive verified data and its source, not a folder of scans.
Storage is decentralised. Data lives in your own infrastructure, as a closed on-premises system, and every action is cryptographically signed.
- End-to-end encryption with MLS group encryption and automatic key rotation
- Decentralised storage secured by passkey, with no central data silo
- Active and passive liveness checks, NFC chip reading and two-factor authentication
- Consent-scoped access: purpose, time window and revocation on every permission
- Privacy-preserving verification, so originals are not re-shared
- Audit record on both sides of every exchange: what, with whom, under which permission, when
- GDPR-compliant processing, with data processing agreements for every provider
- DORA-aligned operational resilience and incident handling
- On-premises, in the infrastructure of the institution
- Security questionnaire and architecture overview on request
- Continuous compliance monitoring with Compliance Labs Liechtenstein
- Sub-processor list, provided with the data processing agreement
- Responsible disclosure: write to us and we will respond
For your compliance team
Everything you need for due diligence.
Ask for the documentation your risk process requires. We will walk your team through it.
Request the security pack →