Security

Trust is the entire product. Here's how Known Technologies, Inc. protects your data and the integrity of the badge.

Data protection

• All data is encrypted in transit (TLS 1.2+) and at rest.
• Row-level security gates every database read and write to the owning user.
• Sensitive verification columns (signals, timestamps, counters) are server-only — clients cannot self-grant a badge.
• Profile photo is locked for 180 days after verification; changes require a fresh selfie match.

Identity verification

• Government ID + biometric face match through a third-party verification provider.
• Cross-platform consistency check across at least two linked social accounts.
• Manual verification flow uses live URL re-fetch and forensic image analysis to defeat photo edits.

Abuse prevention

• Verification attempts are rate-limited and cooled-down to prevent provider billing abuse.
• Usernames and verified legal names are immutable once set.

Responsible disclosure

Found a security issue? Please email security@known.id. We respond within 72 hours and credit reporters once a fix has shipped.