Security, privacy and what is simulated
Plain statements about what this platform is and is not.
Privacy by design
The architecture tokenises and hashes personal identifiers at the edge, shares selective disclosures, and keeps raw evidence encrypted off-chain.
Alignment, not certification
The framework is designed with GDPR, FATF recommendations, Basel principles and PCI DSS in mind. No certification, audit or regulatory approval is claimed for this demonstration.
Evidence integrity
Records are hash-chained and endorsed by a validator quorum so tampering is detectable. See the ledger demo in the sandbox.
Responsible disclosure
Report suspected vulnerabilities to security@csdfcrif.com. Our security.txt is published at /.well-known/security.txt.
Accessibility
We target WCAG 2.2 AA. Tell us about any barrier at support@csdfcrif.com.
Data residency
Sovereign and in-country deployment options are part of the Enterprise and Government designs.