Security

Security and trust,
in plain English

You see these badges across our site. This page explains what each one actually means in practice, without the jargon and without inflating anything.

KYC-verified workforceGDPR compliantAWS cloud infrastructureStripe secure billing

100% KYC-verified, and what that means

Anyone you meet on UrProject, a company or a worker, has been through the same identity check. Here is how it works.

1

Everyone verifies, no exceptions

Every user on UrProject, companies and workers alike, completes identity verification before they get access to the platform.

2

A human reviews every document

ID and supporting documents are reviewed by our admin team. There are no automated approvals, a person checks each submission.

3

Verified badge on the profile

Once approved, the verified badge is visible on the profile, so everyone you deal with has been through the same check. If something is wrong, re-submission is allowed.

4

Documents stay current

Expiry dates on documents are tracked, and automated alerts chase renewals before they lapse. Verified does not mean verified once.

Your data, handled properly

Identity documents and workforce records are sensitive. Here is where your data lives and what control you have over it.

Encrypted storage on AWS

UrProject is hosted on AWS cloud infrastructure with encrypted data storage.

A full activity audit trail

Document uploads, status changes, approvals and profile updates are all logged, so there is a record of who did what and when.

GDPR data subject requests

Data subject access requests are supported through our admin controls. Ask for your data and we can act on it.

Deletion on your terms

You can request account deletion at any time. Once verified, your account and associated personal data are permanently deleted within 30 days, except where retention is required for legal, tax, audit or regulatory compliance purposes.

How account deletion works
Payments

Billing runs on Stripe

Subscription payments are processed by Stripe, a PCI-compliant payment provider. Your card details go to Stripe, not to us. UrProject does not store card details.

Site evidence

Attendance you can stand behind

Clock-ins are geofenced. Each one is GPS-verified against the site geofence, so an attendance record on UrProject means someone was actually there, not just that a box was ticked.

Got a question we have not answered?

We keep this page limited to what we actually do. We do not hold certifications we have not listed here, and we will not pretend otherwise. If your company has a security questionnaire or a specific question about how we handle data, ask us directly and we will give you a straight answer.

Ask a security question

A workforce you can verify, records you can trust.

Free to start. No card details.

Start free