Security & trust
Escrow TrustLock is built around one idea: nothing about your money should be silent or automatic. Here's exactly how we protect your transactions and your data.
A human verifies every payment
Nothing is marked "funded" automatically. An Admin manually checks each proof of payment against what's actually due before the Seller is told to proceed.
Row-level security on every table
Access control is enforced at the database layer, not just in the app. A Buyer's queries can only ever return rows they're actually party to — even if a request bypassed our UI entirely.
Payment proofs stay private
A Seller sees that a payment was verified — never the Buyer's bank statement or wallet screenshot. Only the Buyer who uploaded it and Admins reviewing it can see the file.
No public file URLs
Payment proofs and identity documents live in private storage and are only ever served through short-lived signed links generated on request.
Privileged actions are locked down
Only a verified Admin account can verify payments, resolve disputes, or force a transaction's status — every one of those actions requires the account to carry admin privileges at the database level, not just in the interface.
Every admin action is logged
Verifications, dispute resolutions, and forced status changes are written to a permanent audit trail — who did what, when, and why.