FairFund / Security and trust model

How FairFund keeps a transaction private and its record honest.

Each organisation sees only what it is entitled to. Choosing a partner and instructing a payment need a second factor. Documents are held privately with their hashes. Every read of somebody else’s data is logged, and the audit record is append-only and hash-chained. And FairFund holds no money, so there is no balance here to take.

Isolation

One organisation cannot see another

Scoping is applied in the database with the organisation taken from the session row, never from anything the client sends.

Partners see only what matches

A financial partner sees a requirement only when it matches the partner’s own declared mandate, and never sees another partner’s offer.

Signing in and the sharp actions

A second factor where it matters

Choosing a partner and instructing a payment both need a code from your authenticator, and each code works once.

Sessions end

A session left idle stops working. When an administrator disables a person, every session they hold ends at once.

Documents and the record

Documents are held privately

Stored with their hash, retrieved through the application, and never exposed on a public URL. A document whose bytes no longer match its hash is refused rather than served.

Every read is logged

Every read of somebody else’s data is logged, including searches that returned nothing, because what was looked for is part of the record.

The record cannot be quietly rewritten

Audit entries are append-only and hash-chained inside the database. /health/audit reports, publicly, whether the chain is unbroken.

Money, sources and integrations

No money is held

There is no balance, wallet or ledger in this system. FairFund is not a bank, an NBFC, a lender, a guarantor or an insurer.

Verification says who checked

No government register is connected live today; the RBI register of banks and NBFCs is imported from its published download. A named reviewer verifies each document, and the record says who checked it and what they read. The live state of every source is on the integration status table.

Integrations ship switched off

An external integration is enabled only after its agreement is recorded, its test passes and a second administrator approves it.

Questions about security

Can another company see my documents?

No. A document is retrieved only through the application, for an organisation entitled to it, and is never served from a public URL.

Does FairFund hold or move my money?

No. There is no balance, wallet or ledger anywhere in the system. Money moves between you, your financial partner, your supplier and your buyer; FairFund records the reference.

Is my data sent to an AI provider?

No. Every AI provider is switched off because no data processing agreement is signed, so nothing is sent anywhere for inference.

How can I check that the record has not been altered?

The audit record is append-only and hash-chained in the database, and the public endpoint /health/audit reports whether the chain is unbroken.

Is FairFund certified?

FairFund does not claim any security certification, such as ISO/IEC 27001 or SOC 2. This page describes how the software behaves; it is not an audit report.

To report a security concern, use the contact page.