Security by design
AFINDY uses authentication step-up, authorization checks, least-privilege access, input validation, audit records, private-by-default evidence, and environment-separated secrets.
Evidence integrity
AFINDY may calculate SHA-256 hashes for stored evidence to help detect later changes. Hash integrity does not prove truth or legal admissibility.
Incident response
We investigate suspected security incidents, contain access, preserve relevant records, and notify affected people or authorities when required by applicable law.
Security contact
Report a suspected vulnerability or security concern through the Trust Center support path. Do not include secrets or unnecessary personal information.
Questions or rights requests? Visit Legal Requests.