Encrypted evidence
S3 server-side encryption, restricted bucket policies, no public document access, and time-limited access patterns.
Security architecture
Security is not a phase. It is the architecture.
KlearRoute handles commercial documents, bank evidence, ownership data, and payment workflows. The security model starts at verification: encryption, access control, webhook verification, audit logging, and immutable evidence storage.
Request security notesBaseline controls.
Access control
Role-based customer data access, least privilege infrastructure roles, MFA, and logged administrative actions.
Webhook integrity
Incoming WhatsApp provider events require signature validation before any workflow transition is accepted.
What Anchor records.
UploadsDocument receipt, parser results, version changes, and evidence-source metadata.
AccessWho viewed or changed a record, when, why, and which workflow it affected.
DecisionsApproval, flag, dispute, release, and exception events stored as commercial memory.