Security, Encryption & Privacy

Your privacy and data security are core design principles of the Vertueal platform. Personal identification files and financial documentation uploaded to the Member Vault are treated with the highest tier of confidentiality.

---

Technical Security Safeguards

1. Encryption in Transit and at Rest

• At Rest: All documents uploaded to the Member Vault are encrypted using AES-256 encryption before storage in isolated cloud storage buckets.
• In Transit: All communication between your browser and our edge servers is encrypted via modern TLS 1.3.

2. Strict Role-Based Access Control

• Your raw compliance files are never public.
• Only verified administrators within your specific organization who hold administrative verification privileges can view your uploaded files.
• Other members, hiring businesses, or third parties can only see your Verified Status Badge—they never have access to your raw identity documents.

3. Signed, Short-Lived Access URLs

When an administrator inspects a file in the review queue:

• The system generates a time-limited, cryptographically signed URL valid for only 15 minutes.
• Files cannot be scraped or accessed via permanent public URLs.

---

Data Privacy Compliance (POPIA / GDPR)

• Purpose Limitation: Your compliance records are utilized solely for identity and business verification within your community.
• Right to Erasure: You may request the permanent deletion of your compliance vault files at any time via your account settings. Deleting documents will remove the associated verification badge from your profile.
• Audit Logging: Every view, download, or status update performed on your documents by an administrator is permanently recorded in the system audit log.