ACID Double-Entry Ledger Architecture

Every balance movement (purchases, posting deductions, dossier unlocks, refunds) is committed through an append-only double-entry ledger with SHA-256 cryptographic checksums. Balances can never be arbitrarily modified or forged.

ClamAV File Malware Scanning & Quarantine

All engineering blueprints, BoQ spreadsheets, and quotation PDFs uploaded by counterparties undergo real-time heuristic antivirus analysis to quarantine embedded VBA macros, malicious executables, or corrupted payloads.

Four-Eyes (Maker-Checker) Internal Controls

In accordance with ISO/IEC 27001 and SOC 2 Type II governance, internal balance adjustments require separate Maker and Checker approvals. Self-approval is cryptographically blocked by the platform core.

Server-Side Zero-Leak Privacy Guard

Confidential corporate data (tax IDs, exact addresses, PIC telephone numbers) is stripped at the API serialization layer, preventing client-side scraping, inspection leakages, or unauthorized contact hoarding.