SECURITY
The ledger is only as good as what protects it.
BASEL9 handles contract value, supplier data and field records. We treat that the way the people who issue it would: locked, logged and accounted for.
Customer data is stored and processed in the EU. BASEL9 AS is the data controller for production workloads.
All traffic is encrypted with TLS in transit. Data at rest is encrypted with provider-managed keys on industry-standard storage.
Role-based access on every record. Production access is limited to a named set of engineers and logged.
Every reconciliation event, override and export is recorded against a user and a timestamp. Logs are retained for the life of the contract.
BASEL9 is built around GDPR principles: lawful basis, data minimisation and the right to access, rectify and erase personal data.
Found a vulnerability? Email security@basel9.com. We respond within two business days.
This page is maintained by BASEL9 AS and describes current practices. It is not an independent certification.