Security
Security is not a feature. It's the foundation.
Every design decision at Sanctuary starts with one question: how do we protect the data?
SOC 2 Type II
In Progress
Architecture designed to SOC 2 Trust Service Criteria
GDPR
Compliant
Pseudonymized data only. Full deletion on request.
CCPA
Compliant
Minimal PII. User data export available.
OFAC
Daily Screening
Sanctions evidence is monitored and checked on every query.
How we protect your data
Privacy-First Protocol
Wallet addresses are pseudonymized before storage. Raw addresses cannot be recovered from stored data.
Pseudonymization happens at the point of ingestion. Only derived identifiers are stored.
Privacy-Preserving Pre-Screening
The screening pipeline is designed to minimize data exposure. Most lookups are resolved without accessing stored records.
Only potential matches proceed to full analysis. Negative results are never logged.
Modern Password Security
Passwords are stored using industry-standard hashing resistant to brute-force attacks.
Credential storage follows current industry best practices with hardened parameters.
Tenant Data Isolation
Strict data isolation between accounts. Enforced at the storage layer, not just the application.
Multi-tenant isolation enforced at the infrastructure level, preventing cross-account data access.
Infrastructure Hardening
Network isolation between services. Strict security headers on every response.
Minimal attack surface. Internal services communicate over isolated networks.
Immutable Audit Trail
Every significant action is logged to a tamper-evident audit trail. Registrations, wallet checks, admin actions — all tracked.
Full actor attribution, operation context, and metadata recorded for compliance and forensics.
Encryption at every layer
In transit
All connections encrypted with TLS 1.3. No protocol downgrades permitted.
At rest
All databases and caches run on encrypted storage volumes. Wallet addresses stored only as irreversible cryptographic hashes.
Keys and secrets
API keys are hashed before storage. Only the prefix is visible to the user. Signing keys are never persisted to disk.
Incident response
Severity classification
P0 — Critical1 hour response
Data breach, full service outage, security compromise
P1 — High4 hour response
Major feature broken, degraded scoring accuracy
P2 — Medium24 hour response
Minor feature regression, non-blocking issues
P3 — LowNext business day
Documentation, cosmetic issues
Breach notification
Security incidents affecting personal data are reported within 72 hours per GDPR Article 33. Affected customers are notified individually with details of the breach, data involved, and mitigation steps.
Graceful degradation
When external intelligence sources are unavailable, Sanctuary automatically falls back to internal-only scoring. Coverage may be reduced but the service remains available.
Vulnerability disclosure
Scope
- Web application (sanctuary.cv)
- REST API endpoints
- Authentication and session handling
- Data exposure and access control
Out of scope: infrastructure hosting, third-party services, social engineering, DDoS.
Response priority
CriticalTop priority
HighHigh priority
MediumCase-by-case
LowRecognition
Report to [email protected]. PGP key available on request.
SOC 2 roadmap
Q1 2026Architecture aligned to SOC 2 Trust Service Criteria
Q2 2026Internal controls documented. Logging and audit trail hardened.
Q3 2026Type I readiness assessment with external auditor (in progress)
Q4 2026Type II audit initiation (3-6 month observation period)
Data retention
| Data type | Retention | Legal basis |
|---|---|---|
| Account data | Until deletion + 30 days | Contract performance |
| Wallet pseudonymized hashes | Free: 1yr, Pro: 3yr, Enterprise: configurable | Legitimate interest |
| Check snapshots | Free: 30d, Pro: 1yr, Enterprise: indefinite | Contract performance |
| Billing records | 7 years | Tax law compliance |
| Server logs | 30 days | Legitimate interest |
| Temporary address cache | 7 days (user-scoped) | Contract performance |
Security Whitepaper
Detailed documentation of our security architecture and data handling policies. Available under NDA.
Request Whitepaper