Trust & security

Compliance data deserves compliance-grade security.

Your passports carry supplier relationships, material data and regulatory evidence. Here’s how we protect it — and exactly where we are on our security journey.

EU hosting, for the product’s life

Passport data is hosted in EU cloud regions and kept available for the product’s full lifecycle plus the post-end-of-life period, with access for market-surveillance authorities.

Privacy by design

We act as a data processor for our customers, with data-processing agreements and controls designed for both the EU GDPR and India’s DPDP Act 2023.

Tamper-evident records

Supplier claims are secured with W3C Verifiable Credentials, so anyone can check that data hasn’t been altered since it was issued.

Open standards

Built around EN 18219 / 18220, GS1 Digital Link, EPCIS 2.0 and JSON-LD — so your passports stay valid and interoperable.

You own your data

Clear data-ownership terms in every contract. Export everything in open formats whenever you like.

Least-privilege sharing

Role-based views mean each audience sees only what it needs. Sensitive supplier data stays private unless you choose to share it.

Security programme

Where we are today

We’d rather be precise than impressive. This is our current status, and we update this page as we progress.

Framework	What it covers	Status
EU GDPR	Lawful processing, data-processing agreements, Article 32 security measures	Built in by design
India DPDP Act 2023	Personal data handled in India	Built in by design
EU data residency	EU-region hosting of passport data	Built in by design
ISO/IEC 27001	Externally audited information-security management system	In progress
ISO/IEC 27701	Privacy extension to ISO 27001	Planned
SOC 2 Type II	Security controls report for enterprise and US buyers	Planned

Need our security questionnaire or a data-processing agreement? Email hello@zevoyt.com.

Reporting a security issue

If you believe you’ve found a security vulnerability in zevoyt, please email hello@zevoyt.com with the subject “Security report”. We’ll acknowledge your report promptly and keep you updated while we investigate. Please don’t access other customers’ data or disrupt our service while testing.

Get your first passport live in weeks, not years.

Drop your work email and we’ll map your fastest path to EU compliance — it takes 30 seconds.

or see how the platform works first