In short: a name you screen in the dashboard is matched in your own browser. We keep a record of what you screened only to give you an audit trail to show regulators. It is never sold, shared or used for anything else, and it is erased when you delete your account.
| Data | Includes your clients' details? | Why we keep it | Where | How long |
|---|---|---|---|---|
| Your name and email (sign-in) | No | To sign you in | Clerk (USA) | While your account exists |
| Your company name | No | Shown on your reports | MongoDB Atlas, Mumbai | Until you delete your account |
| User audit trail: each search, its type and time, and whether a PDF was made | Yes: the names and identifiers you searched | Your evidence that screening took place | MongoDB Atlas, Mumbai | Until you delete your account |
| Batch screening reports: each row of the file and its result | Yes: names, dates of birth, ID numbers in the file | An unchangeable record of the batch, so a results file can always be traced to it | MongoDB Atlas, Mumbai | Until you delete your account |
| Monitored clients and their alerts | Yes: the clients you chose to monitor | To re-screen them when a list changes | MongoDB Atlas, Mumbai | Until you remove them or delete your account |
| Payment details | No | Subscriptions | Entered on the payment provider's page: card details never reach us | As the provider requires |
We do not use advertising or tracking cookies, and we do not build profiles of you or of your clients.
All four are US companies. Where your data sits is set by the region we chose, shown below.
| Provider | What it does for us | Location | Receives your screening data? |
|---|---|---|---|
| Vercel Inc. | Serves the website and the sanctions list files | Global content network | No |
| Clerk Inc. | Sign-in and sessions | USA | No (name and email only) |
| Railway Corp. | Runs our server: batch screening, monitoring, the audit trail | California, USA | Processes it, does not store it |
| MongoDB Inc. (Atlas, on AWS) | Database for the records in section 2 | Mumbai, India (AWS ap-south-1) | Stores it, encrypted at rest |
Data travels between your browser, these providers and each other over encrypted connections (HTTPS / TLS). Our server logs record errors and timings, never the names you screen. Our pages also load fonts from Google Fonts and two libraries from Cloudflare's public CDN: these see your IP address, not your searches.
Write to info@sanctioncheck.in. If your organisation needs a data processing agreement or a security questionnaire answered, ask us.