Your data is yours. Access controls, data isolation, and audit trails keep your operations private and compliant.
Every route and API endpoint requires an authenticated session. There is no anonymous access — your data is always behind a login gate.
User and admin roles are strictly separated. Admin operations — user management, audit logs, disposable domains — are gated to admin accounts only.
Your verification history, bulk jobs, and exported data are always scoped to your account. Other users never have access to your records.
Every verification operation is logged with user identity, timestamp, IP address, and result. Admins have full visibility for operational and compliance needs.
All submission endpoints are rate-limited to prevent abuse. Single verification is limited to 30 requests per minute; bulk uploads to 10 per minute.
Passwords are never stored in plain text. All sensitive operations use cryptographically secure methods. Tokens are time-limited and signed.
Questions about our security practices? We're happy to chat.