As written about in this article, Evident operates by these two guiding principles:
- First, protect consumer data.
- Second, protect businesses from having to store and manage that data.
What makes the Evident platform so secure?
Evident's platform contains a host of security features that work in tandem to protect sensitive information.
- Single API: We’ve got a single API, which means rather than having to reach out to multiple vendors or sources for data you’re just reaching out to a single source - the Evident API.
- Crypto ACL: We leverage Crypto ACL (which stands for Cryptographic Access Control Lists) and at it's most basic level is simply a security protocol that governs who has access to what information.
- Tamper-proof Integrity Controls: We use this in combination with signed attributes to asymmetrically provide access to either the authoritative sources that we connect with, you as the business or the user. In general, you as the business are only exposed to data when you explicitly request this level of access.
- Policy Evaluation and Data Minimization: Through a concept called a “policy,” we provide a simplified solution to the decision-making process in relation to applicants or existing users. We employ a strong focus on principles of efficiency and automation. Our goals are to help streamline complex and challenging processes for our customers.
We don’t expose all data to all parties across the board. Instead, each piece of data is encrypted and exposed individually on a need-to-know basis only.
We prioritize consumer privacy and control over their own data, and we strive in every instance to protect businesses from unnecessary handling, viewing, or absorption of data. We do this to minimize the business's exposure in terms of data collection, storage, and management.
Now, let's walk through how this affects basic features of the Evident platform.