Security Policy

Security is a core principle of the Blockchain Evidence Management System. This document outlines the measures taken to protect data, users, and system integrity.

1. Blockchain Security

Evidence records are stored using blockchain technology, ensuring immutability, transparency, and resistance to tampering once data is verified.

2. Wallet & Authentication Security

• Private keys remain under user control and are never stored on our servers.
• Authentication via MetaMask ensures cryptographic identity verification.
• Email/password authentication follows secure hashing and validation practices.

3. Data Protection

Sensitive metadata is encrypted both in transit and at rest. Access is controlled using role-based permissions to ensure least-privilege access.

4. Vulnerability Reporting

If you discover a security vulnerability, please report it responsibly. We encourage ethical disclosure to help maintain system safety.

Contact: DGC2MHNE@proton.me

5. Continuous Improvement

Security practices are reviewed and updated regularly to align with ISO 27001 and NIST Cybersecurity Framework guidelines.

← Back to Home