Security page content.
Security

How WhoWiki keeps your data safe

This page explains how WhoWiki protects the data you enter and the checks you run. In short: your searches move over an encrypted connection, we collect as little as possible, and we do not sell your data or use your checks to profile you.

Our practices

Four things we do to protect you

Encryption in transit

Every connection to WhoWiki uses HTTPS with modern TLS. Data moving between your browser and our servers is encrypted.

Data minimization

We ask for as little as possible. Most checks run without an account, and we do not request details we do not need to give you a result.

How your searches are handled

Your checks run against public sanctions and business data. We do not use them to build a profile, and we do not sell search data.

Infrastructure and access

WhoWiki runs on established cloud infrastructure. System access is limited to the people who need it and protected by strong authentication.

Our commitments

What we hold ourselves to

  • You can run a single check without creating an account.
  • We do not sell or rent your data.
  • We do not use your searches to advertise to you.
  • We show the source and date behind every result, so nothing is hidden.
Responsible disclosure

Reporting a security issue

To report a vulnerability, email security@whowiki.org with a description and the steps to reproduce it. We read every report.

We will not pursue legal action against researchers who act in good faith, avoid privacy violations and service disruption, and give us reasonable time to respond before disclosing.

Please include: the affected URL or feature, a description of the issue, steps to reproduce, and how we can reach you.

Questions

Security questions

Is WhoWiki safe to use?
Yes. Connections use HTTPS with modern TLS, we collect as little data as we can, and you can run most checks without an account. We do not sell your data or use your searches to advertise to you.
Does WhoWiki store my searches?
We keep only what we need to run and secure the service. We do not use your searches to build a marketing profile, and we do not sell search data to anyone.
Do I need an account to run a check?
No. Single checks run without an account. An account is only needed for paid features such as bulk screening, monitoring, and the API.
How do I report a security problem?
Email security@whowiki.org with the affected page and steps to reproduce. We do not take legal action against researchers who report issues in good faith and follow responsible disclosure.