Investor protection, modelled at every layer
The security architecture this sandbox is designed around — from escrow-style capital handling to immutable traceability records.
Six layers of investor protection
Escrow-Style Capital Handling
In the model this build represents, investor capital sits in a ring-fenced custodian account until a project's funding threshold is met — segregated from operating funds at all times.
Encryption at Rest
Investor personal data and KYC documents would be encrypted at rest under this model, with key management handled independently of application access.
Encryption in Transit
All traffic between an investor's device and the platform would run over modern transport encryption, with no legacy fallback.
Biometric KYC & Liveness
Signup's KYC/AML prompt reflects a biometric verification step designed to prevent identity fraud at onboarding, with periodic re-screening thereafter.
AML Monitoring
The Admin Console's Compliance & ESG tab demonstrates velocity and threshold-style flag review — the workflow a continuous transaction-monitoring system would feed.
Immutable Traceability Records
Once a gold batch's pit-to-vault record is logged, it's modelled as unable to be altered or deleted — verifiable independently of MineStarter's own systems.
What each safeguard is meant to do for you
| Safeguard | What it requires | How it protects you |
|---|---|---|
| Project licensing | Every mining partner holds an active licence before listing | Your capital funds a legitimate, identifiable operation |
| Escrow-style custody | Investor capital ring-fenced from operating funds | Funds can't be accessed before a project's threshold is met |
| KYC / AML checks | Identity verification and screening at onboarding | You invest alongside verified, screened investors |
| Blockchain-style records | Ownership tokens written to an immutable ledger model | Your ownership record is independently verifiable |
| ESG audit trail | Independent audits before and during funding | Projects meet a verified environmental and safety standard |
This describes the security model this sandbox is designed around, not a live security posture — no real financial systems or blockchain networks are connected to this build.