Security & trust
What we do to earn your trust
Your security, legal and procurement teams will want to know how we handle access, data and agreements. Here is what's true today, including what we don't have yet.
Practices
How we protect access, data and records
Encrypted connections
Our APIs and services accept HTTPS connections only, and ZEI refuses to fetch anything but public HTTPS pages.
Two-factor back office
Access to our internal operations requires a verified account with two-factor authentication. Staff access is granted by role and can be revoked.
Locked-down data
Every table in our operations database has row-level access rules switched on. Customer-facing records are readable only through narrow, permission-checked functions.
Fingerprinted results
Results carry SHA-256 fingerprints of what was checked and what was found, so either side can later prove a result wasn't changed.
Tamper-evident agreements
Agreements are signed in KnightSign: each signer confirms their email with a one-time code and consents to electronic records, and every step is added to a hash-chained record.
No card numbers on our side
Pay-per-call APIs are paid in USDC over x402. We never receive or store card numbers for those calls.
Your data
What happens to what you send
- We use what you submit to produce the result you asked for, as described in our Privacy Policy.
- Licensed customers can sign a data processing agreement and an AI addendum that set how their data may and may not be used.
- You can ask us to access, correct or delete personal information by emailing operations@blackknightstech.com.
Honest limits
What our results are, and aren't
- Our products give technical decision support. They are not legal advice, legal opinions, or government or regulatory certification.
- Results are based only on the evidence or pages you supply; each product page lists what it does not check.
- We do not yet hold a SOC 2 report or ISO 27001 certification. We'll tell you plainly when that changes.
Agreements for your legal team
Mutual NDA, cloud service agreement, service level agreement, data processing agreement and AI addendum, based on open Common Paper standards. Ask for copies before you buy.
Request agreement copiesReport a security issue
If you believe you've found a vulnerability, email us with the details and how to reproduce it. Please test only systems you're authorized to test and don't access other people's data.
Email operations@blackknightstech.comBlack Knight Technology is an assumed name (d/b/a) of Black Knight Transportation LLC, a Texas limited liability company.