<!doctype html>
<html lang="en">
<head>
  <meta charset="utf-8" />
  <meta name="viewport" content="width=device-width,initial-scale=1" />
  <meta name="theme-color" content="#0EA5E9" />
  <link rel="icon" type="image/png" sizes="32x32" href="/public/og/favicon-32.png">
  <link rel="icon" type="image/png" sizes="16x16" href="/public/og/favicon-16.png">
  <link rel="apple-touch-icon" sizes="48x48" href="/public/og/favicon-48.png">
  <title>Trust, Privacy &amp; Compliance — How takedowns Protects Your Data</title>
  <meta name="description" content="takedowns security and privacy posture: data minimization, no raw media storage, MFA, RBAC, Stripe billing, audit logs, and per-tenant isolation. For procurement and compliance teams." />
  <meta name="keywords" content="takedowns security, privacy posture, data minimization, MFA, RBAC, Stripe billing, compliance, audit logs" />
  <meta name="author" content="takedowns" />
  <meta name="robots" content="index, follow, max-snippet:-1, max-image-preview:large" />
  <link rel="canonical" href="https://takedowns.vesamuni.com/trust" />

  <meta property="og:type" content="website" />
  <meta property="og:site_name" content="takedowns by vesamuni" />
  <meta property="og:title" content="Trust, Privacy &amp; Compliance — takedowns" />
  <meta property="og:description" content="Security and privacy posture: data minimization, MFA, RBAC, Stripe billing, audit logs." />
  <meta property="og:url" content="https://takedowns.vesamuni.com/trust" />
  <meta property="og:image" content="https://takedowns.vesamuni.com/public/og/trust.png" />
  <meta property="og:locale" content="en_US" />
  <meta property="og:locale:alternate" content="en_GB" />
  <meta property="og:locale:alternate" content="en_AU" />
  <meta property="og:locale:alternate" content="en_CA" />
  <meta property="og:locale:alternate" content="en_IN" />
  <meta property="og:locale:alternate" content="en_IE" />
  <meta property="og:locale:alternate" content="de_DE" />
  <meta property="og:locale:alternate" content="fr_FR" />
  <meta property="og:locale:alternate" content="es_ES" />

  <meta name="twitter:card" content="summary_large_image" />
  <meta name="twitter:title" content="Trust, Privacy &amp; Compliance — takedowns" />
  <meta name="twitter:description" content="Security and privacy posture: data minimization, MFA, RBAC, Stripe billing, audit logs." />
  
  <link rel="manifest" href="/public/manifest.json" />
  <!-- Premium Fonts -->
  <link rel="preconnect" href="https://fonts.googleapis.com">
  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
  <link href="https://fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,300;0,9..40,400;0,9..40,500;0,9..40,600;1,9..40,400&family=Instrument+Serif:ital@0;1&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet">
  <!-- CSS-PRELOAD -->
  <link rel="preload" as="style" href="/public/css/marketing.css?v=3.11-skyclean" />

  
  <link rel="stylesheet" href="/public/css/glass.css?v=2-light" />
  <link rel="stylesheet" href="/public/css/marketing.css?v=4-light" />
  <script src="/public/js/marketing-css-fix.js" defer></script>
<!-- JSON-LD: JSONLD-BREADCRUMB -->
  <script type="application/ld+json">
  {
  "@context": "https://schema.org",
  "@type": "BreadcrumbList",
  "itemListElement": [
    {
      "@type": "ListItem",
      "position": 1,
      "name": "Home",
      "item": "https://takedowns.vesamuni.com/"
    },
    {
      "@type": "ListItem",
      "position": 2,
      "name": "Trust",
      "item": "https://takedowns.vesamuni.com/trust"
    }
  ]
}
</script>
  <!-- JSON-LD: JSONLD-TRUST -->
  <script type="application/ld+json">
  {
  "@context": "https://schema.org",
  "@type": "WebPage",
  "name": "Trust and compliance — takedowns",
  "url": "https://takedowns.vesamuni.com/trust",
  "description": "Privacy posture, Stripe billing, MFA, RBAC, tamper-evident evidence bundles, and audit logs.",
  "about": [
    {
      "@type": "Thing",
      "name": "Privacy posture"
    },
    {
      "@type": "Thing",
      "name": "Stripe billing"
    },
    {
      "@type": "Thing",
      "name": "Multi-factor authentication"
    },
    {
      "@type": "Thing",
      "name": "Role-based access control"
    }
  ]
}
</script>
  <!-- JSON-LD: FAQPAGE — trust-side questions -->
  <script type="application/ld+json">
  {
  "@context": "https://schema.org",
  "@type": "FAQPage",
  "mainEntity": [
    {
      "@type": "Question",
      "name": "Where is takedowns's data hosted?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "takedowns runs on hardened Node.js infrastructure with TLS 1.3 across every channel. Operators can elect US or EU regions at signup; per-tenant isolation is enforced in both."
      }
    },
    {
      "@type": "Question",
      "name": "Is takedowns SOC 2 or ISO 27001 certified?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "takedowns is currently pursuing SOC 2 Type II. The current trust posture (TLS 1.3, MFA, RBAC, immutable audit logs, Stripe-only billing, data minimization) maps to SOC 2 controls; certification is expected in late 2026."
      }
    },
    {
      "@type": "Question",
      "name": "Do you ever see or store the original media?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "No. Hashing is performed in the user's browser. Only the perceptual fingerprint and metadata ever leave the device. The original file is never uploaded."
      }
    },
    {
      "@type": "Question",
      "name": "Can we sign a Data Processing Agreement (DPA)?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Yes. Standard DPA available on request for Agency and Creator customers. EU Standard Contractual Clauses (SCCs) included for GDPR transfers."
      }
    },
    {
      "@type": "Question",
      "name": "How do you handle legal holds and evidence requests?",
      "acceptedAnswer": {
        "@type": "Answer",
        "text": "Evidence bundles are checksummed and stored outside the public web root. They survive a counter-notice dispute, an FTC complaint, and a criminal prosecution. We can place a legal hold on a case for any length of time."
      }
    }
  ]
}
</script>
  <!-- JSON-LD: ORGANIZATION — knowsAbout + certifications -->
  <script type="application/ld+json">
  {
  "@context": "https://schema.org",
  "@type": "Organization",
  "name": "takedowns",
  "legalName": "Vesamuni Cybersecurity",
  "url": "https://takedowns.vesamuni.com/",
  "logo": "https://takedowns.vesamuni.com/public/og/logo.png",
  "description": "Privacy-first platform helping survivors, advocates, agencies, and creators track, document, and request removals of non-consensual intimate material.",
  "knowsAbout": [
    "DMCA takedown workflow",
    "NCII (non-consensual intimate imagery) response",
    "Perceptual hashing",
    "Chain of custody for digital evidence",
    "GDPR & data minimization",
    "Role-based access control (RBAC)",
    "Multi-factor authentication (MFA)",
    "Stripe billing security",
    "TAKE IT DOWN Act compliance",
    "StopNCII.org hash sharing"
  ],
  "sameAs": [
    "https://takedowns.vesamuni.com/for-survivors",
    "https://takedowns.vesamuni.com/for-creators",
    "https://takedowns.vesamuni.com/features",
    "https://takedowns.vesamuni.com/trust",
    "https://takedowns.vesamuni.com/blog"
  ]
}
</script>
</head>
<body>

  <div class="radial-glow"></div>
  <div class="grid-bg"></div>

  <!-- Mobile Overlay Menu -->
  <div class="mobile-menu-overlay" id="mobileMenu" aria-hidden="true" role="dialog">

        <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">Main</div>
      <div class="mobile-menu-links">
        <a href="/">Home</a>
        <a href="/features">Features</a>
        <a href="/pricing">Pricing</a>
      </div>
    </div>
    <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">For You</div>
      <div class="mobile-menu-links">
        <a href="/for-survivors">For Survivors</a>
        <a href="/for-creators">For Creators</a>
      </div>
    </div>
    <div class="mobile-menu-section">
      <div class="mobile-menu-section-label">Resources</div>
      <div class="mobile-menu-links">
        <a href="/how-it-works">How It Works</a>
        <a href="/who-it-helps">Who It Helps</a>
        <a href="/blog">Blog</a>
      </div>
    </div>
    <div class="mobile-menu-actions">
      <a href="/login" class="btn btn-secondary" style="width: 100%;">Sign in</a>
      <a href="/register" class="btn btn-primary" style="width: 100%; background-color: var(--fg); color: var(--bg);">Create account</a>
    </div>
    <div class="mobile-menu-footer">
      <a href="/privacy">Privacy</a>
      <a href="/terms">Terms</a>
      <a href="/cookies">Cookies</a>
      <a href="/dmca">DMCA</a>
      <a href="/acceptable-use">Acceptable Use</a>
    </div>
  </div>

  <!-- Floating Navigation -->
  <div class="nav-wrapper" id="navWrapper">
    <nav class="nav-pill" id="navPill" aria-label="Main Navigation">
      <a href="/#top" class="brand" aria-label="takedowns home">
        <div class="brand-logo" aria-hidden="true">
          <img src="/public/og/logo-mark.png" alt="" width="32" height="32" />
        </div>
        <span>takedowns</span>
      </a>


            <div class="nav-links">
        <a href="/">Home</a>
        <a href="/features">Features</a>
        <div class="nav-item-dropdown" data-dropdown>
          <button type="button" class="nav-trigger" aria-haspopup="true" aria-expanded="false">For You</button>
          <div class="nav-dropdown" role="menu">
            <a href="/for-survivors" role="menuitem">
              <span class="nav-dropdown-title">For Survivors</span>
              <span class="nav-dropdown-desc">Confidential, self-serve recovery</span>
            </a>
            <a href="/for-creators" role="menuitem">
              <span class="nav-dropdown-title">For Creators</span>
              <span class="nav-dropdown-desc">OnlyFans, Fansly, webcam protection</span>
            </a>
          </div>
        </div>
        <div class="nav-item-dropdown" data-dropdown>
          <button type="button" class="nav-trigger" aria-haspopup="true" aria-expanded="false">Resources</button>
          <div class="nav-dropdown" role="menu">
            <a href="/how-it-works" role="menuitem">
              <span class="nav-dropdown-title">How It Works</span>
              <span class="nav-dropdown-desc">Five steps from reference to removal</span>
            </a>
            <a href="/who-it-helps" role="menuitem">
              <span class="nav-dropdown-title">Who It Helps</span>
              <span class="nav-dropdown-desc">Survivors, advocates, agencies, creators</span>
            </a>
            <a href="/blog" role="menuitem">
              <span class="nav-dropdown-title">Blog</span>
              <span class="nav-dropdown-desc">Practical guides and case studies</span>
            </a>
          </div>
        </div>
        <a href="/pricing">Pricing</a>
      </div>

      <div class="nav-actions">
        <a href="/login" class="btn btn-text" style="color: var(--fg-secondary); padding: 8px 16px;">Sign in</a>
        <a href="/register" class="btn btn-primary">Create account</a>
      </div>

      <button class="burger-btn" id="burgerBtn" aria-label="Toggle Menu" aria-expanded="false">
        <svg viewBox="0 0 24 24" width="24" height="24" fill="none" stroke="currentColor" stroke-width="1.5"
          stroke-linecap="round" stroke-linejoin="round">
          <line x1="3" y1="6" x2="21" y2="6" class="line-top"></line>
          <line x1="3" y1="12" x2="21" y2="12" class="line-mid"></line>
          <line x1="3" y1="18" x2="21" y2="18" class="line-bot"></line>
        </svg>
      </button>
    </nav>
  </div>

  <!-- Hero Section -->
  <section class="hero-section container">
    <span class="section-label">Compliance</span>
    <h1 class="hero-title">Trust, posture, &amp; <em>privacy</em> matrices.</h1>
    <p class="hero-desc">takedowns is designed with strict data minimization principles. We map technical protocols directly to user safety requirements.</p>
  </section>

  <!-- Accordion Sections -->
  <section class="container reveal" style="padding-top: 0; padding-bottom: 140px;">
    <div class="accordion-wrapper">
      
      <!-- 1. Security Architecture -->
      <div class="accordion-item">
        <div class="accordion-title">Security Architecture</div>
        <div class="accordion-content">
          <p>
            takedowns operates inside a hardened Node.js deployment environment. We enforce strict Content Security Policies (CSP) via Helmet headers, restricting script execution origins, base-uri paths, and prohibiting inline script handlers to mitigate cross-site scripting (XSS) risks.
          </p>
          <p>
            All network channels route exclusively over TLS 1.3 encryption, ensuring confidentiality and protection against packet-level eavesdropping.
          </p>
        </div>
      </div>

      <!-- 2. Data Protection -->
      <div class="accordion-item">
        <div class="accordion-title">Data Protection</div>
        <div class="accordion-content">
          <p>
            We apply layered request-validation controls on every state-modifying operation to verify browser
            origin and prevent cross-organization exposure. All database entries are isolated in per-tenant
            partitions, and direct object references are never exposed through public endpoints.
          </p>
          <p>
            Perceptual matching is performed in isolated processing pipelines. Raw media is never persisted on
            takedowns infrastructure — only fingerprints and metadata leave a trace.
          </p>
        </div>
      </div>

      <!-- 3. Evidence Handling -->
      <div class="accordion-item">
        <div class="accordion-title">Evidence Handling</div>
        <div class="accordion-content">
          <p>
            Evidence logs are chronologically structured. When operators verify exposing links, the platform
            exports a complete, self-contained record of the target page — including scripts, styles, and any
            embedded media — into a tamper-evident evidence bundle.
          </p>
          <p>
            These bundles are stored in isolated directories outside the public web root, protected from
            indexing, and checksummed to maintain a defensible chain of custody for legal holds.
          </p>
        </div>
      </div>

      <!-- 4. Authentication -->
      <div class="accordion-item">
        <div class="accordion-title">Authentication</div>
        <div class="accordion-content">
          <p>
            User credentials are protected with strong adaptive password hashing, salted per account. Session
            tokens are short-lived, rotated continuously, and bound to secure browser cookies to prevent
            client-side interception.
          </p>
          <p>
            Multi-factor authentication is available for every account, ensuring protection even if a primary
            password is compromised.
          </p>
        </div>
      </div>

      <!-- 5. Billing -->
      <div class="accordion-item">
        <div class="accordion-title">Billing</div>
        <div class="accordion-content">
          <p>
            All subscriptions, plan changes, and transactions are processed directly via secure Stripe APIs. takedowns servers never store, process, or see raw credit card values, utilizing Stripe's client-side inputs and webhook checks to manage billing states.
          </p>
        </div>
      </div>

      <!-- 6. Permissions -->
      <div class="accordion-item">
        <div class="accordion-title">Permissions</div>
        <div class="accordion-content">
          <p>
            We enforce strict Role-Based Access Control (RBAC). General advocates access only assigned survivor case directories. Organization managers manage billing details, and superadmins execute security settings and key rotations. Every configuration adjustment is recorded in system logs.
          </p>
        </div>
      </div>

      <!-- 7. Transparency -->
      <div class="accordion-item">
        <div class="accordion-title">Transparency &amp; Disclaimers</div>
        <div class="accordion-content">
          <p id="privacy">
            takedowns is an automated workflow, evidence collection, and compliance notification platform. We are not a law enforcement organization, database index, private investigator service, or legal counsel.
          </p>
          <p>
            We provide structured technical tools to speed up takedown notices and maintain proof logs. We believe in transparency, publishing data-minimization policies, and running regular server-level safety scans.
          </p>
        </div>
      </div>

    </div>
  </section>

  <!-- Read next — legal/compliance reading from the blog -->
  <section class="read-next container reveal" aria-labelledby="readNextTrust">
    <div class="read-next-head">
      <span class="section-label">From the blog</span>
      <h2 id="readNextTrust">Where our privacy and compliance posture meets the law.</h2>
      <p>Two pieces our compliance reviewers send to procurement teams. One explains how our evidence holds up in court; the other maps NCII law across five jurisdictions.</p>
    </div>
    <div class="read-next-grid read-next-grid--two">
      <a href="/blog/chain-of-custody-digital-evidence-courts-accept" class="read-next-card">
        <div class="read-next-card-image">
          <img src="/public/og/blog/chain-of-custody-digital-evidence-courts-accept.png" alt="Chain of Custody for Digital Evidence: What Courts Actually Accept" loading="lazy" />
          <span class="read-next-card-badge">Legal</span>
        </div>
        <div class="read-next-card-body">
          <div class="read-next-card-meta">10 min read &middot; Legal</div>
          <h3 class="read-next-card-title">Chain of Custody for Digital Evidence: What Courts Actually Accept</h3>
          <span class="read-next-card-cta">Read the guide &rarr;</span>
        </div>
      </a>
      <a href="/blog/ncii-laws-comparison-us-eu-uk-australia-india" class="read-next-card">
        <div class="read-next-card-image">
          <img src="/public/og/blog/ncii-laws-comparison-us-eu-uk-australia-india.png" alt="NCII Laws Compared: US, EU, UK, Australia, India — Jurisdictional Playbook" loading="lazy" />
          <span class="read-next-card-badge">Regulatory</span>
        </div>
        <div class="read-next-card-body">
          <div class="read-next-card-meta">13 min read &middot; Regulatory</div>
          <h3 class="read-next-card-title">NCII Laws Compared: US, EU, UK, Australia, India &mdash; Jurisdictional Playbook</h3>
          <span class="read-next-card-cta">Read the jurisdictional guide &rarr;</span>
        </div>
      </a>
    </div>
    <div class="read-next-foot">
      <a href="/blog?cat=Legal">All legal &amp; regulatory articles &rarr;</a>
    </div>
  </section>

  <!-- Footer -->
  <footer class="app-footer">
    <div class="container">
      <div class="footer-grid">
        <div class="footer-brand">
          <a href="/#top" class="brand" aria-label="takedowns home">
        <div class="brand-logo" aria-hidden="true">
          <img src="/public/og/logo-mark.png" alt="" width="32" height="32" />
        </div>
        <span>takedowns</span>
      </a>
          <p>Privacy-first platform helping survivors, advocates, and agencies track, document, and request removals of
            non-consensual intimate material — including images, video, audio, and AI-generated content.</p>
        </div>

        <div class="footer-col">
          <h4>Product</h4>
          <ul>
            <li><a href="/#features">Features</a></li>
            <li><a href="/#pricing">Pricing</a></li>
            <li><a href="/#how-it-works">How It Works</a></li>
            <li><a href="/blog">Blog</a></li>
          </ul>
        </div>

        <div class="footer-col">
          <h4>Company</h4>
          <ul>
            <li><a href="/about">About</a></li>
            <li><a href="/contact">Contact</a></li>
            <li><a href="/#who-it-helps">Who It Helps</a></li>
          </ul>
        </div>

        <div class="footer-col">
          <h4>Legal and Trust</h4>
          <ul>
            <li><a href="/trust">Trust and Privacy</a></li>
            <li><a href="/login">Sign in</a></li>
            <li><a href="/register">Create account</a></li>
          </ul>
        </div>
      </div>

      <div class="footer-bottom">
        <span>&copy; 2026 takedowns. Built under Vesamuni Cybersecurity.</span>
        <div class="footer-bottom-links">
          <a href="/trust#privacy">Privacy</a>
          <a href="/trust">Security</a>
          <a href="/trust">Terms</a>
        </div>
      </div>
    </div>
  </footer>

  <script src="/public/js/marketing.js" defer></script>
</body>
</html>
