Skip to content
OWNEX
Trust & security

Private by default. Provable forever.

OWNEX is built on one clear separation: your evidence stays private and under your control, while the proof of it becomes permanent and tamper-evident.

The model

What stays private, what becomes proof

You should never have to publish a receipt to prove you had one. OWNEX splits data into two worlds.

Stays private, off-chain

Encrypted vault & databases

  • Your photos, receipts and certificates
  • Your name and contact details
  • Asset descriptions and notes
  • Anything you might need corrected or erased

Becomes proof, on-chain

Permissioned Hyperledger Fabric

  • Cryptographic hashes of each proof
  • Ownership and transfer events
  • Status flags (owned, transferred, flagged)
  • Timestamps and signing references
  • Never names, files, or personal data
Principles

Security choices we won't trade away

These constraints are part of the product, not an afterthought.

Strong identity, always

Sign-in, registration and transfers all require BankID — including Secure Start with same-device and animated QR flows.

Evidence is encrypted

Photos, receipts and certificates are stored encrypted in private object storage. There are no public buckets or links.

Proofs are immutable

Ownership events and evidence hashes are written to a permissioned Hyperledger Fabric ledger that nobody can quietly rewrite.

Privacy by design

The ledger holds no names or personal identifiers. Personal data stays in systems where it can be corrected and erased.

Clear data separation

Private data lives off-chain in PostgreSQL and encrypted storage; only hashes and ownership metadata are anchored on-chain.

Least-privilege access

Internal services and operators get the minimum access needed, with auditable administrative actions.

Found a vulnerability?

We take responsible disclosure seriously. If you believe you have found a security issue in OWNEX, please reach out and we will get back to you quickly.

Contact the security team