Security and data protection
How KYC-Chain hosts, encrypts and controls access to the personal and company data your applicants submit.
Reviewed 28 Oct 2026
Independent testing
- In 2025 an external security firm carried out a penetration test of the KYC-Chain platform, including its API.
Hosting
- Hosted in Frankfurt, Germany, in the European Union. Dedicated instances are available on the Enterprise plan.
Encryption
- Data is encrypted.
Access control and audit trails
- Two-factor authentication, role-based permissions and four-eyes approval.
- Audit trails of activity on every application and of every configuration change.
Data protection
- You own your data, and KYC-Chain is GDPR compliant.
Questions for a security review: contact us. The fact sheet covers the rest of the platform.
