Security and trust
Fondaq is built to rules that every change is checked against. Here they are in plain words.
Card numbers never enter Fondaq.
Payments use your provider's tokens. No card number, security code or full payment credential is stored, logged or traced.
You are always the seller.
No order is marked paid without your payment provider's confirmation.
Every AI agent is checked at the door.
Requests from AI agents pass a trust edge that verifies who they are and applies your rules before they reach anything.
Records that can't be rewritten.
Consents, mandates and disclosures are append-only and hash-chained, and anyone with access can verify the chain.
Your data stays yours.
Every record belongs to one workspace. No business sees another's data, and data stays in its home region.
AI says it's AI.
Every Fondaq agent that talks to a person says it's automated, and generated content is marked as AI-made.
Rules by country.
Offers in restricted categories are never shown where they aren't allowed. When the country is unknown, the answer is no.
Budgets with a hard stop.
Every AI task, call and ad runs against a budget. When it's used up, the work stops.
Go deeper
- The trust centreGenerated from the running system: controls, sub-processors, residency and status.
- AI systems we runEach system's role, what it does and how it discloses itself.
- Lab transparencyWhat Fondaq's test agents do and how a site can opt out.
- Report a vulnerabilityHow to reach the security team, in security.txt.