How ProblemBank protects your data and keeps every action auditable.
Every vote, problem submission, idea, login, and role change is written to a hash-chained, append-only log. This isn't a claim — the badge above is a live result of recomputing every hash right now, 85 entries deep.
| Action | Actor | Target | Hash | When |
|---|---|---|---|---|
| interest:security_concern | anonymous | interest_signal #0 | c40579fd37… | 05:09:29 |
| interest:marketplace_general_interest | anonymous | interest_signal #0 | f9bb2406cc… | 05:09:26 |
| interest:innovation_as_a_service | anonymous | interest_signal #0 | 3488996f3e… | 05:09:23 |
| interest:vertical_subscription | anonymous | interest_signal #0 | 99f505da29… | 05:09:20 |
| interest:vertical_subscription | anonymous | interest_signal #0 | ed3d510dc0… | 05:09:16 |
| interest:vertical_subscription | anonymous | interest_signal #0 | 310af942e9… | 05:09:12 |
| interest:vertical_subscription | anonymous | interest_signal #0 | 75255165f0… | 05:09:09 |
| interest:vertical_subscription | anonymous | interest_signal #0 | b8cd685278… | 05:09:05 |
| interest:vertical_subscription | anonymous | interest_signal #0 | 5414454830… | 05:09:00 |
| interest:security_concern | anonymous | interest_signal #0 | 591fc41dbe… | 05:01:34 |
This is an honest status: the architecture is built around all five AICPA criteria, but no third-party SOC 2 audit has happened yet — that's a milestone tied to the Investor/payments launch, not to this Phase 1 build.
Session-based auth, hashed passwords, role-based access checks on every write route.
Not yet applicable at Phase 1 scale — no uptime SLA published yet.
Hash-chained audit log (live above), unique-constraint-enforced one-vote-per-user-per-target.
Passwords hashed with Werkzeug/PBKDF2, never stored in plaintext.
No third-party data sharing yet; a real Privacy Policy is still an outstanding legal task (see the Legal Scaffolding doc).
No AI features are live in this Phase 1 build yet — the Concierge page is a preview only, not wired to a live model. When AI features do ship, they follow the guardrails designed in the platform strategy docs: advisory and cited, never autonomous with money.