Sign in

Security & trust

How ABSB protects your business

Only controls that are actually in place are listed. Anything not listed is not claimed.

In place today

  • Email confirmation is required before an account can sign in.
  • All traffic to absb.ai is served over HTTPS (encryption in transit).
  • Row-level access rules on every database table: you only read records your company or role is allowed to see.
  • Company documents sit in a private storage area readable only by that company's members and ABSB HQ reviewers.
  • Roles (HQ, verifier, country partner) are held in a separate permissions table and re-checked on the server for every action.
  • Nobody can verify their own company. Verification outcomes are append-only and can only be recorded by HQ-assigned reviewers.
  • Contact details are released only after both sides accept an introduction.
  • When HQ opens a member's records, a reason is logged first and the member can see it in My account.
  • Error logs are sanitised and contain no personal data.

Not claimed

  • SOC 2, ISO 27001, PCI DSS or any government certification
  • Independent penetration testing
  • Multi-factor sign-in
  • KYC / AML or sanctions screening
  • Holding or moving customer funds — buyer/seller payments happen outside ABSB

Verification levels

Level 0 Unverified · Level 1 Account verified (email confirmed) · Level 2 Business verified (registration checked by ABSB HQ) · Level 3 Enhanced (plus address and an operational, licence or reference check).

Verification confirms specific facts only. It is not an endorsement, guarantee, credit check or government approval. Verification policy

Contacts

A named Data Protection Officer has not yet been appointed; privacy requests go to the inbox above.

To report a vulnerability or suspected incident, email the security contact with the page and steps. Please do not access other members' data.