Here is how we protect your funds, your data, and your deals — at every layer of the platform.
Escrow removes the leap of faith from working with someone you have no history with. Funds are verified, held against the deal, and released only on approval — never on an unverified instruction.
From the moment funds arrive to the moment they're released, each step is verified and logged.
Deposits are matched to the deal and verified at the required confirmation depth before the deal advances.
Funds are held against the deal and can never be moved on an unverified instruction.
Money only releases when the buyer approves or the agreed terms are met — with dual-control on large payouts.
Six pillars that protect your money, your data, and the integrity of every transaction.
Funds held in escrow
Buyer funds are independently verified and held in escrow until the deal terms are met. Money never moves on an unverified instruction.
Server-side, double-entry money
Every amount is computed server-side in the smallest unit and recorded in an append-only double-entry ledger, so balances always reconcile.
Encryption & key management
Sensitive data is encrypted at rest with envelope encryption backed by a master key, and access is scoped on a need-to-know basis.
Confidential by default
The presence of a mediator on a deal is kept private, and counterparties only see what they need to complete the transaction.
Operational integrity
Critical settings are change-controlled with cooldowns and rollback, and background jobs are monitored with alerting and dead-letter handling.
Account protection
Strong password rules, breached-password screening, session controls, and step-up confirmation on sensitive actions protect your account.
We collect the minimum, encrypt the sensitive, and never sell your data.
Encrypted personal data
Email and sign-up details are encrypted at rest, and only the neutral mediator assigned to a deal can view what is needed to run it.
Passwords never readable
Passwords are hashed with a modern algorithm and are never visible to anyone — including the operator.
Payout details hidden
Payout addresses and transaction references are encrypted and never exposed to another user.
Access logged
Every time personal information is decrypted or viewed, it is recorded for full accountability.
Hash-chained
Tamper-evident audit logs
Dual-control
On large payouts
Allowlist
Operator withdrawal addresses
Screened
Deposit & payout destinations
We are building machine-learning risk scoring to flag suspicious deal patterns before funding, and an AI assistant that summarises dispute evidence for the mediator. Neither is live today, and dispute decisions will remain human. We list it here so you know what is shipped and what is not.
Monitored 24/7
Health checks, error tracking, and balance reconciliation against settlement records.
Incident response
A written plan to detect, contain, and notify if data is ever exposed.
Emergency pause
A circuit breaker can pause deposits, payouts, or a settlement network during an incident.
Found a vulnerability? We appreciate your help. Please report it privately so we can fix it before it is disclosed. Email erik.cox@fidesvault.com with steps to reproduce. Our machine-readable policy is published at /.well-known/security.txt. Please do not access other users’ data, degrade the service, or disclose publicly until we have resolved the issue.
Questions about security or your data? Read our Privacy Policy or contact us.
AI contract scanner & deal checker
We are building an AI-powered scanner that extracts key terms, obligations, and dates, flags risky or non-standard clauses, and checks deals against company policy and playbooks — re-checked every time a document is uploaded, edited, or re-submitted, with human review for consequential decisions.
Escrow-held funds, a neutral mediator, and a tamper-evident audit trail on every deal.