How is personal data security maintained on the platform?

Personal data is safeguarded through end-to-end encryption, secure storage, and strict access controls aligned with EU privacy standards. These measures work together to create a comprehensive security framework that protects user information at every stage: from the moment data is submitted during registration and verification, through its storage on secure servers, to any authorised access that occurs during account management or compliance review processes.

Encryption plays a central role in the platform's data security architecture. All data transmitted between the user's device and the platform's servers is protected using modern, industry-standard TLS encryption protocols. This ensures sensitive information — including personal details, login credentials, and financial data — cannot be intercepted or read by unauthorised parties during transmission. At rest, personal data is stored on secure servers protected by multi-layered physical and digital security, including advanced firewalls, intrusion detection systems, and redundant backup procedures that safeguard against data loss due to hardware failure or other technical incidents.

Access controls add a further layer of protection by strictly limiting who within the organisation can view or interact with user data. The platform operates on the principle of 'least privilege', meaning that employees and systems are granted access only to the specific data required to perform their legally mandated duties. All access is logged and monitored, creating an auditable trail that supports both internal oversight and regulatory compliance. The platform also conducts regular security audits, vulnerability assessments, and system updates to identify and address emerging threats proactively. Users can contribute to the security of their own data by enabling two-factor authentication, using strong, unique passwords, being cautious of phishing attempts, and avoiding accessing their accounts from unsecured public networks. Together, these platform-level and user-level measures create a robust and continuously evolving defence system that keeps personal data protected in accordance with the highest industry and regulatory standards.