We practice what we preach. Our own company data is on this platform, subject to the same security standards we provide to you.
We don't just build this platform - we use it ourselves. Our company profile, publications, and credentials are all stored and displayed using the same system you'll use. This means:
Data at Rest
All database records encrypted using AES-256 encryption
Data in Transit
TLS 1.3 encryption for all connections (HTTPS only)
Session Security
HTTP-only, secure, SameSite cookies with automatic expiration
Infrastructure
TiDB (MySQL-compatible) with enterprise-grade security
Backups
Automatic daily backups with 30-day retention
Access Control
Role-based permissions (Admin, User, Public)
Hosting
Manus platform with SOC 2 Type II compliance
File Storage
S3-compatible object storage with access controls
Uptime
99.9% uptime SLA with automatic failover
Activity Logs
All entity changes tracked with timestamps and user IDs
Admin Actions
Complete audit trail of all administrative activities
Security Monitoring
24/7 automated monitoring for suspicious activity
We NEVER sell your data
Full GDPR & CCPA compliance
SOC 2 Type II
Infrastructure
GDPR
EU Compliance
CCPA
California Privacy
PCI DSS
Payment Security
You submit entity data through our secure form. Files are uploaded to encrypted storage. Data is marked as "pending review."
Our admin team reviews your submission for accuracy and compliance. We verify business credentials and domain ownership. This is a human process - no automated rejections.
Once approved, your entity goes live with a unique ID (e.g., D-001). It's immediately available through our website and public API.
Your entity is displayed publicly with JSON-LD schema markup. AI models can access it through our frictionless API. You maintain full control to edit or delete.
If you delete your entity, it's removed from public display immediately. Data is permanently deleted after 30 days. No traces remain in our system.
While we provide enterprise-grade security, you also play a role in keeping your account secure:
In the unlikely event of a security incident:
Immediate Response
We'll contain the incident within 1 hour of detection and begin investigation immediately.
User Notification
Affected users will be notified within 24 hours via email with details about what happened and what data was affected.
Remediation
We'll implement fixes and security improvements to prevent recurrence, and provide regular updates until resolution.
Post-Incident Report
A detailed public report will be published explaining what happened, impact, and steps taken to prevent future incidents.
If you have security concerns or want to report a vulnerability:
We take all security reports seriously and respond within 24 hours.