SECURITY
END-TO-END ENCRYPTION
All data in transit is encrypted with TLS 1.3. All data at rest is encrypted with AES-256.
SECURITY
BUILT TO SOC 2 PRINCIPLES
GRAJ is designed around SOC 2 security principles — access control, encryption, and audit logging. Formal SOC 2 Type II certification is on our roadmap as we scale.
SECURITY
GLOBAL DATA RIGHTS
Data rights for every participant, worldwide — not just the EU. Access, export, and deletion any time from your settings. GDPR- and CCPA-aligned as a global baseline.
SECURITY
SECURITY REVIEWS
Ongoing internal security review, with third-party penetration testing planned as we grow. Critical issues are prioritized and patched fast.
SECURITY
FRAUD DETECTION
Transaction monitoring and fraud checks on every order.
SECURITY
TAMPER-EVIDENT RECORD
Transaction history and reputation are written to an append-only protocol ledger — verifiable, and not silently editable after the fact.