Data and documents
Your evidence stays yours
Suppliers trust us with business records and buyers trust us with sourcing plans. Here is exactly how we handle both.
Where your data is stored
| What | Where | Provider |
|---|---|---|
| Database (applications, accounts, Trust Passports, audit log) | Zurich, Switzerland | Supabase, managed PostgreSQL |
| Web application servers | Frankfurt, Germany | Vercel |
| Uploaded documents | Not accepted online during the preview | Opens to invited suppliers with private storage in Switzerland |
Who can see what
- You
- Everything you submit, and who has viewed your Trust Passport.
- SokoNexus reviewers
- Your documents, to check them. Each review is recorded with the reviewer's name and reason.
- Buyers
- Your Trust Passport only after you consent to share it with that buyer. They see evidence levels, not your raw files, unless you allow it.
- Programmes and financiers
- Aggregated, anonymised readiness figures. Never your documents without your written permission.
Verification is done by people
A named reviewer compares each document with the claim it supports and records the result, the reason and the expiry date. Software may help sort and read documents, but it can never mark a claim as verified. Confidential documents are not sent to outside AI services without the owner's consent.
How we protect it
- Encrypted connections only (HTTPS with HSTS)
- Passwords stored as one-way hashes; we never see them
- Documents opened only through short-lived signed links
- Every important action written to an audit log
- Network addresses stored only as one-way hashes, to stop abuse
Your rights
You can ask to see, correct, export or delete your data at any time. Write to lyciasz@sokonexus.com. Some records, such as the audit log of verification decisions, may be kept for the period the law requires. Full details are in the privacy notice.