Privacy

EGVANCO stores the profile, identity documents, and ledger entries needed to operate the account.

• Government ID numbers and MFA secrets are sealed with AES-256-GCM when a key is configured. Legacy rows can still be read.
• KYC files are not published on the website. Reviewers use short-lived download tokens.
• Durable storage requires S3-compatible object storage (SeaweedFS on the VPS). Until S3_ENABLED=true, files sit on the API disk and can be lost on rebuild.
• Sanctions screening is not performed. A profile is not a clearance.