ความมั่นคง

EU-hosted. EU-licensed. EU-rules.

Three layers of trust, all designed for European business reality.

Money: PSD2-licensed escrow

Trade Assurance funds are held under Mangopay's e-money-institution license, regulated by the Commission de Surveillance du Secteur Financier in Luxembourg, EU-passported. Funds sit in segregated client accounts at our partner bank, not on listing.company's balance sheet — meaning even if listing.company as a company hit hard times, your held funds are bankruptcy-remote and recoverable.

Card payments run through Stripe (PCI-DSS Level 1 certified, the highest tier). listing.company never sees full card numbers — they're tokenized at Stripe and only a token is stored.

Data: EU-only, GDPR-native

Servers in Hetzner Falkenstein (Germany) and Helsinki (Finland). No data leaves the EU. No data is sent to a US-based AI provider — every model that processes user content runs on listing.company-owned GPUs in those same EU data centers. The implication: a European business using listing.company never has to worry about US CLOUD Act exposure or non-EU subprocessor risk.

You can export everything we have on you in machine-readable JSON in one click (GDPR Article 15). You can delete it just as easily (Article 17). Audit log of who-touched-what for the last 24 months on every claimed listing.

Communications: encrypted end-to-end

Inquiry messages, AI translations, dispute discussions — all encrypted at rest with rotating per-tenant keys. In transit, TLS 1.3 only (no fallback to weaker ciphers). The AI translator processes content in-memory only; we don't train any model on user content.

Account access

อีเมล์ + รหัสผ่าน (bcrypt-hashed, 12-round work factor) + TOTP 2FA ตัวเลือกผ่านแอปตัวยืนยันมาตรฐานใด ๆ SSO ผ่าน SAML/OIDC ให้บริการสำหรับ Enterprise tier 쿠กเซสชันเป็น HTTP-only, Secure, SameSite=Lax

สถานะความปฏิบัติตาม

• GDPR พร้อมตั้งแต่เปิดตัว
• EU AI Act — ประเภทความเสี่ยงที่จัดประเภทเป็น Limited Risk สำหรับสแต็คของตัวแทนของเรา
• Mangopay license assignment in progress, scope: e-money issuance for marketplace
• SOC 2 Type II — audit scheduled Q4 2026
• ISO 27001 — gap analysis complete, certification cycle Q1 2027