Security and Data Protection at OnchainTA
As an SEC-registered digital transfer agent for tokenized securities, OnchainTA is entrusted with issuer records, investor information and the integrity of securities transactions. Protecting them is built into how our services are designed and operated.
On this page
Our Approach to Security
Controlled access
Issuers, investors and OnchainTA staff each see only what their role requires, through authenticated accounts.
Encryption
Sensitive information is encrypted in storage and in transit.
Independent audit
Our technology and smart contracts were independently audited by Highland Security, and all audit findings have since been addressed.
Protected infrastructure
Our applications and private data run on secured infrastructure with layered protections.
Verified ownership changes
Wallet replacements and other ownership changes require identity and authority verification.
Investor Identities Stay Off the Blockchain
Investor names, contact details and KYC records are kept in private, access-controlled systems and are never written to public blockchain records. The blockchain records wallet addresses, balances and transfers, so ownership stays verifiable without exposing who the owners are.
| On the public blockchain | In OnchainTA's private systems |
|---|---|
| Wallet addresses, token balances, transfers | Names, contact details, KYC records, confidential documents |
- Wallet addresses, token balances, transfers
- Names, contact details, KYC records, confidential documents
Wallet addresses are pseudonymous rather than anonymous: blockchain explorers can display balances and transaction history publicly.
Trusted Service Providers
We work with selected providers for hosting, identity verification and payments, and share only the information each service requires. Our Privacy Policy explains how personal information is used and protected.
Security Details for Due Diligence
Issuers and financial institutions evaluating OnchainTA can request detailed security information during due diligence, shared under a non-disclosure agreement.
Report a Security Concern
If you believe you've found a vulnerability or suspicious activity affecting OnchainTA, email security@onchainta.com with a description, the affected page or application and when you noticed it. Please don't send passwords, private keys, recovery phrases or identity documents. Researchers should read our Vulnerability Disclosure Policy first. For account help, email support@onchainta.com.
Security Questions
Does OnchainTA put investors' personal information on the blockchain?
No. Identity and KYC records stay in private systems; the blockchain records wallet addresses, balances and transfers.
Are wallet addresses anonymous?
No, they're pseudonymous. Information from elsewhere can sometimes link an address to a person or organization.
What happens if an investor loses access to a wallet?
The investor requests a replacement. After identity and authority verification, the holding is restored to a new wallet.