Security isn’t a page. It’s how the platform is built. Here’s exactly what protects you, and from what.
Session tokens are protected from client-side script access. Login tokens live in httpOnly cookies, reducing the risk of theft through malicious scripts. Passwords are hashed with argon2id.
A stranger logging in from a new device gets noticed. Device fingerprinting flags unfamiliar sign-ins, and repeated failed logins get exponentially slower.
Uploaded files are scanned and locked down. Every document is virus-scanned and served through signed URLs that expire.
Your sensitive business details are encrypted at rest. Registration numbers, bank references, and contact details are covered.
Nothing in a Deal Room can be quietly altered later. Status changes are recorded in an append-only audit log rather than an editable history.
Strict validation rejects malformed or malicious requests up front. Every request is checked against a strict schema before it's processed.
One bad actor can’t take the platform down for everyone. Rate limiting stops scripted abuse without slowing your normal usage.
SQL injection isn’t a way in. Every database query is parameterized.
A signed PDF you can hand to counsel or a bank. Bronze+ companies can export the full audit trail — timestamps, actors, every status change.
Records stick around long enough to matter. Retained for 7 years, in line with standard commercial recordkeeping practice for cross-border trade.
Sellarge isn’t a custodian of funds. Payments are processed through Sellarge’s integrated payment infrastructure, and Sellarge does not take custody of customer funds.
Funds are automatically settled according to the agreed transaction terms. The seller receives the amount due directly, and Sellarge’s fee is settled as part of the transaction. No manual release. No waiting on Sellarge to move your money.