Skip to main content
TRUST CENTER

Security and privacy, built in from day one.

Proof of Actor sits in the request path of your application, so we hold it to the standard we would expect from any vendor there. Here is how we protect your data and how to review us.

Request a security reviewVulnerability disclosure

At a glance

  • Hosted on Amazon Web Services
  • Encrypted in transit and at rest
  • Tenant-isolated customer data
  • No identity checks or biometrics
  • DPA available on request
SECURITY

How we protect the service

  • Hosted on AWS

    Proof of Actor runs on Amazon Web Services infrastructure, inheriting AWS physical, network and environmental security controls.

  • Encryption in transit and at rest

    All traffic to our services uses TLS. Stored data is encrypted at rest using AWS-managed encryption.

  • Tenant isolation

    Each customer's data is logically separated, and every query is scoped to the customer that owns the data.

  • Least-privilege access

    Production access is limited to the engineers who need it, protected by multi-factor authentication and reviewed as the team grows.

  • Minimal collection

    We collect the signals needed to classify an interaction and nothing more. Proof of Actor does not perform identity checks, KYC or biometric verification.

  • Observation first

    Installing Proof of Actor changes nothing in your application. Every enforcement decision stays in your own code.

DATA

How we handle your data

  • Your data, your instructions

    For interaction data from your application, we act as a processor and use it only to provide the service to you.

  • Retention you agree

    Retention periods are agreed with each founding team, and we delete customer data on request or at the end of the agreement.

  • No training on your data

    We do not sell customer data and do not use it to train models for other customers.

  • Incident notification

    If an incident affects your data, we notify you without undue delay with what happened, what was affected and what we are doing about it.

SUB-PROCESSORS

Who helps us run the service

Third parties that process data on our behalf. We update this list before adding a new sub-processor for customer data.

Sub-processors
ProviderPurposeApplies to
Amazon Web ServicesCloud hosting, storage and infrastructureProof of Actor and website
Transactional email providerDelivery of form submissions and service emailWebsite and service email
Google (Google Analytics)Website analyticsWebsite only
Meta Platforms (Meta Pixel)Website campaign measurementWebsite only
FOR YOUR SECURITY TEAM

Everything your review needs

Security contact: [email protected] · Last updated November 13, 2026

Bring your security team in early.

We walk founding teams through our architecture before integration.

Request a security reviewGet Early Access

Prefer to talk first? Talk to the founders