Security Infrastructure

CheckBokx Security
Vault Architecture

Our data security standards are built around least-privilege access, encrypted storage, and strict compliance parameters.

Key Management

Rotated signing keys for session integrity.

Session tokens are signed and verified with HMAC-SHA256, scoped to a short expiry, and delivered only via HTTP-only, secure cookies.

  • HTTP-only, SameSite cookies
  • PBKDF2-hashed credentials
  • Role-scoped middleware on every request

Least-Privilege Directory

Isolated per-portal data access.

Each of the seven portals only ever queries the slice of the registry its role is authorized for — enforced at both the middleware and data-access layer.

  • Masked Aadhaar by default
  • Consent recorded on every search
  • Immutable audit trail