CommodityOS
Security & Trust
Last updated: September 2026
CommodityOS processes transactions involving the movement of real goods and real money across international borders. We take our responsibility to protect that data seriously. This page explains exactly how we secure your information, who has access to it, and what technology backs every layer of the platform.
Encryption
Data at rest
All data stored on CommodityOS infrastructure is encrypted using AES-256, the same standard used by financial institutions and governments worldwide. Encryption keys are managed by Supabase's key management service and are never stored alongside the data they protect.
Data in transit
All communications between your browser and CommodityOS servers use TLS 1.3, the current highest standard for transport security. Connections using older protocol versions are refused.
Deal room documents
Documents uploaded to deal rooms are stored in encrypted object storage. Access is controlled at the application layer: only participants who are members of that specific deal room can retrieve files.
Identity Verification (KYC)
Powered by Didit
Identity and company verification on CommodityOS is performed by Didit, a regulated identity verification provider used across financial services and fintech. Didit is compliant with eIDAS, GDPR, and AML/KYC regulations in multiple jurisdictions.
What we verify
Individual participants are verified against a government-issued photo ID and a liveness check. Companies are verified against official business registration documents and director information. Verification status is prominently displayed on each participant's profile.
How verification protects you
You can see the verification level of every counterparty before entering a deal room. CommodityOS will not allow unverified parties to progress past the initial introduction stage. This eliminates a major vector for commodity trade fraud.
Data Governance
Who controls your data
Your data belongs to you. CommodityOS stores your deal data on Supabase infrastructure. We do not sell, trade, or share your deal data with any third party, including other users of the platform, except where you have explicitly invited them as deal participants.
Data residency
CommodityOS uses Supabase's managed infrastructure. The default deployment region is EU West (Frankfurt). Enterprise customers may request dedicated regional deployments to meet local data sovereignty requirements.
Data retention
Deal data, contracts, and communications are retained for the duration of your account and for 7 years after a deal closes, to support legal and regulatory requirements. You may request deletion of your personal data at any time by contacting security@commodityos.org.
Escrow & Fund Security
On-chain settlement via Circle
Escrow flows on CommodityOS use Circle USDC on Base, a regulated US Dollar stablecoin on a public blockchain. Every fund movement produces an immutable, publicly verifiable transaction record that cannot be altered or denied.
Milestone-based release
Funds are only released against confirmed milestones, and milestone confirmation requires action from the appropriate parties. No single party can unilaterally release funds. This eliminates the most common dispute vector in commodity transactions.
Dispute resolution
If a milestone is disputed, funds remain locked until the dispute is resolved through the platform's dispute process. A full audit trail of all actions, timestamps, and acknowledgments is available to all authorized parties and to any arbitration body.
Audit Logs
Every action is logged
CommodityOS maintains an immutable audit log of every action taken on the platform: document uploads, signatures, deal stage changes, participant additions, commission locks, and fund movements. Logs cannot be modified or deleted, even by platform administrators.
Accessible to authorized parties
All participants in a deal room can view the full activity timeline for that deal. This creates a shared, tamper-proof record of what happened, when, and by whom — the same information that would be needed to resolve a dispute in arbitration or court.
Access Controls
Role-based access
Access to deal data is controlled by role. Buyers, sellers, brokers, mandates, inspectors, and escrow agents each see only the information relevant to their role in that specific deal. No participant can access data from deals they are not a verified member of.
Organization isolation
Data is scoped at the organization level. Members of one organization cannot see or interact with another organization's deals, participants, or commission records unless explicitly invited.
Session security
Authentication is managed by Supabase Auth, which supports secure session tokens. Passwords are hashed using bcrypt and are never stored in plain text. CommodityOS never has access to your password.
Questions or concerns?
If you have a security question, vulnerability report, or a concern about how your data is handled, contact us at security@commodityos.org. We respond to all security inquiries within 48 hours.