Account security
Passkeys, multifactor authentication, email fallback challenges, protected sessions and audited account changes.
Review evidenceIDENT.INK TRUST CENTRE
Verify the platform.
Do not take claims on faith.
One index for the controls, evidence, boundaries and contacts used to evaluate Ident.ink.CONTROL AREAS
How customer work is protected.
Platform security
Request validation, rate controls, least privilege, security headers, content controls and encrypted transport.
Review evidenceService resilience
Independent readiness checks, failure confirmation, bounded jobs, process recovery and verified backups.
Review evidenceData governance
Purpose, lawful basis, retention, recipients, rights and controller or processor roles.
Review evidenceOAuth safety
Founder-approved applications, PKCE, exact redirect matching, narrow scopes, expiring tokens and immediate revocation.
Review evidenceVulnerability reporting
A published security contact, policy and time-stamped support route.
Review evidenceDUE DILIGENCE INDEX
Canonical public records.
Current releaseIdent.ink 2.9.42026-07-30Open →Live operationsDirect component measurements30-second checksOpen →Provider recordImprint and direct contactPublic disclosureOpen →Processing recordPrivacy NoticePurposes and retentionOpen →Service commitmentsTerms of ServiceRights and responsibilitiesOpen →Incident handlingService incident policyCommunication and reviewOpen →
HONEST BOUNDARIES
Controls reduce risk. They do not make impossible guarantees.
No internet service can promise absolute security or uninterrupted availability. Ident.ink publishes measured status, confirmed incidents and the boundary of encryption rather than an invented perfection claim.
The provider and controller identity record remains visibly incomplete until the operator supplies verified legal-name and geographic-address information. Product code cannot truthfully invent those facts.