Skip to main content

Sigmamarkt · Security

How your data is protected

Your account details, your money and your sale history are protected by the system itself. Here is how, point by point.

  1. 01

    Your account details are encrypted

    What it means for you: even we cannot read your account's password. Email, password, recovery and 2FA data are written to the database only in encrypted form. The keys never sit on the application server; they live in a separate key vault (envelope encryption + KMS). Data is opened only at transfer time, over a recorded channel.

  2. 02

    Only you can reach your data

    What it means for you: no other user can see your data. The rule lives in the database itself, not just in the app (Row Level Security). Even if the app has a bug, the database refuses foreign access.

  3. 03

    Money records are never half-written

    What it means for you: a 'paid but not recorded' state cannot happen. Escrow, balance and audit records are written together in a single operation. If one fails, all of them are undone (ACID).

  4. 04

    Every critical action is recorded

    What it means for you: you can trace who touched your account, when and why. Credential access, payouts, dispute decisions and transfer steps each produce a signed record. These records cannot be edited later; even moderators can only read them.

  5. 05

    Sale history cannot be rewritten

    What it means for you: the history of the account you buy cannot be silently changed. Every sale receipt is linked to the previous sale's signature. Any tampering with the chain shows immediately.

  6. 06

    No silent bans

    What it means for you: if your account is suspended, you see the reason. The decision is recorded and shown to you openly. Appeals are always open.

Transparency note

We are not open source. But our audit results will be public.

After launch we will commission independent security audits. The reports will be published for everyone: penetration testing, dependency scans, key rotation. The code stays closed; the results stay open.

Legal framework

Our data processing complies with KVKK and GDPR. We keep only what is needed. What we keep and why is listed in the Privacy Policy.

Privacy Policy →