How VROTEK encrypts sensitive data
Protecting your content also means protecting the private information you trust us with. VROTEK uses AES-256-GCM
encryption to protect specific sensitive data, including but not limited to:
- Personal details used for doxxing detection, such as addresses and phone numbers.
- Biometric markers used for face detection.
- Temporary face images, which are deleted after processing.
This is encryption at rest: the protected information is encrypted while stored. In the extremely unlikely event that
our database is compromised, the sensitive data covered by this protection would remain encrypted and unreadable without
the corresponding decryption keys.
AES-256-GCM uses 256-bit encryption and includes an integrity check to detect changes to the encrypted data.
VROTEK decrypts protected information when needed for its intended purpose, such as displaying your saved personal
details or processing a match. Encryption protects the stored data while allowing the service to use it for the
protection features you enable.
All VROTEK backup archives stored in external S3-compatible buckets are encrypted with AES-256 before upload. This
protects the database copies, uploaded files and configuration included in each archive. The decryption passphrase is
kept separately, so access to the storage bucket alone does not make the backup contents readable.
Our approach to privacy also extends to the people and systems handling your data. All VROTEK staff undergo advanced
background checks and must use physical hardware security keys, such as YubiKeys, to access VROTEK environments.
High-risk account changes require additional verification.
Our guiding principle is to run VROTEK with the security discipline you would expect from a bank. Encryption, staff
screening, hardware-based access and additional verification are practical parts of that commitment.