Security & trust

Escrow TrustLock is built around one idea: nothing about your money should be silent or automatic. Here's exactly how we protect your transactions and your data.

A human verifies every payment

Nothing is marked "funded" automatically. An Admin manually checks each proof of payment against what's actually due before the Seller is told to proceed.

Row-level security on every table

Access control is enforced at the database layer, not just in the app. A Buyer's queries can only ever return rows they're actually party to — even if a request bypassed our UI entirely.

Payment proofs stay private

A Seller sees that a payment was verified — never the Buyer's bank statement or wallet screenshot. Only the Buyer who uploaded it and Admins reviewing it can see the file.

No public file URLs

Payment proofs and identity documents live in private storage and are only ever served through short-lived signed links generated on request.

Privileged actions are locked down

Only a verified Admin account can verify payments, resolve disputes, or force a transaction's status — every one of those actions requires the account to carry admin privileges at the database level, not just in the interface.

Every admin action is logged

Verifications, dispute resolutions, and forced status changes are written to a permanent audit trail — who did what, when, and why.

Being precise about what we are: Escrow TrustLock verifies payments and mediates disputes — we do not custody funds in an account we control. Payment happens directly between you and our published account or wallet; our role is verification and mediation. See our Terms of Service for the exact relationship.