Privacy
EGVANCO stores account profiles, KYC documents, and ledger entries so the demonstration can be reviewed. This is not a privacy policy of a licensed bank.
- Government ID numbers and MFA secrets are sealed with AES-256-GCM when a key is configured. Legacy rows can still be read.
- KYC files are not published on the website. Reviewers use short-lived download tokens.
- Durable storage requires S3-compatible object storage (SeaweedFS on the VPS). Until S3_ENABLED=true, files sit on the API disk and can be lost on rebuild.
- Sanctions screening is not performed. A profile is not a clearance.