Security and data protection

What V77 Trust does

• Separate workspaces: every request is checked against your workspace, so data from one organisation can't be read or changed from another.
• Encrypted secrets: connector credentials and similar secrets are encrypted before they're stored.
• Tamper-evident records: evidence files and the activity log are chained with SHA-256 fingerprints, so changes would be detectable.
• Least data: network-log discovery keeps only counts, never user names or IP addresses.
• Same-site links only in notifications, to avoid phishing.

What you should do

1. 1
   Turn on multi-factor authentication for your account under Settings → Security, and require it for every member.
2. 2
   Give each person the lowest role they need.
3. 3
   Review members and API keys regularly; remove people who've left.
4. 4
   Don't upload secrets or unnecessary personal data as evidence.

For details of the platform's own security practices, see the Security page. For data protection questions, contact privacy@v77trust.com.