Zero-Trust Data
Privacy Architecture.

1. Zero-Trust Masking & Search Indexing

SOWRegistry fundamentally alters how candidate discovery works. We do not maintain a publicly searchable database of names, phone numbers, or email addresses.

• Algorithmic Obfuscation: Upon successful verification of a candidate, all raw PII is immediately masked at the database level (e.g., "John Smith" becomes "J*** S*****").
• No Open Searching: Employers cannot search our database by name, college, or past company. They must be explicitly provided with a candidate's unique, alphanumeric SOW-ID.
• Default Deny: Even when an employer searches a valid SOW-ID, the system operates on a "Default Deny" protocol. The employer will only see that the ID exists and is valid. They cannot view the underlying records without explicit candidate consent.

2. The 24-Hour Consent Token

Data access on SOWRegistry is temporal and strictly controlled by the data principal (the Candidate).

• Explicit Approval: Employers must issue a formal "Access Request" via the B2B Gateway. Candidates receive this request in their Vault and must manually click "Approve".
• Mathematical Expiry: Once approved, the system generates a cryptographic token that automatically self-destructs exactly 24 hours from the moment of issuance. The employer's access link instantly becomes void upon expiry.
• The Instant Kill Switch: Candidates retain absolute sovereignty over their data. Prior to the 24-hour expiration, candidates can utilize the "Revoke" function in their dashboard, instantly terminating the employer's session and re-engaging the privacy lock.

3. Cryptographic Document Purging

For specialized audits (such as the Closed Company Verification), candidates are required to upload highly sensitive financial documents to our AES-256 encrypted vault. SOWRegistry applies a strict data minimization policy to these files.

4. Employer Anti-Theft Protocols

When an employer is granted their 24-hour viewing window, SOWRegistry enforces hardware and software-level protections to prevent unauthorized data replication.

• KYB Verification: No employer can access the network without undergoing rigorous Know Your Business (KYB) checks, where our admins verify their MCA CIN (Corporate Identification Number) against their registered corporate domain.
• Browser Locking: The Secure Viewer disables right-clicking, text highlighting, and OS-level keyboard shortcuts (Ctrl+C, Ctrl+P, Command+S) to prevent copying or printing.
• Forensic Watermarking: A dynamically generated watermark is tiled diagonally across the candidate's data. This watermark contains the viewing Employer's Name, their precise IP address, and the server timestamp. In the event of a physical photograph being taken of the screen, the leaker is instantly identifiable.

5. DPDP Right to Erasure (The "Right to be Forgotten")

In accordance with the mandates of the DPDP 2026 framework, SOWRegistry guarantees the candidate's absolute Right to Erasure.

You may initiate a full account deletion from your Candidate Vault. Executing this command triggers a cascading database purge:

• Your SOW-ID is permanently invalidated.
• All historical attestation records are zeroed out.
• Any active 24-hour employer access tokens are immediately destroyed.
• Your core account details (Name, Email, Phone) are scrubbed from the primary database structure.

6. Immutable Audit Logs & Financial Ledgers

To prevent fraud and maintain institutional integrity, specific transactional metadata is retained beyond account deletion. This is strictly limited to financial UTR settlement logs (to prevent payment fraud) and cryptographic hashes of issued attestations (which contain no PII, but mathematically prove a certificate was issued at a specific time).

This retention is legally required for financial auditing purposes and contains no human-readable personal data.