Security
Every supplier is verified before they can trade.
Here is how we protect both sides of every transaction. From corporate identity checks to payment isolation.
KYB: Know Your Business
Before a company can list products or receive inquiries, we verify their legal identity. Corporate registration documents are checked against official government databases, tax IDs validated, and legal representatives confirmed via live video. Only Verified companies appear on the marketplace.
Document Vault
Sellers can attach inspection reports, assay certificates, certificates of analysis, and bills of lading to their listings. Everyone sees that a file is on the listing; the file itself opens only for the seller, Kupros staff, and a company with a signed, locked contract with that seller. Kupros records these files; it does not verify what they say.
Payment Security
Kupros never holds client funds. All payments flow directly between buyer and seller through standard banking channels via Letter of Credit. The money moves bank-to-bank, outside our platform. This eliminates counterparty risk with Kupros itself.
Data Isolation
Deal data, inquiry details, and negotiation messages are visible only to the involved parties. RBAC at the API and UI layer prevents cross-account data leakage. Every API endpoint validates user identity before returning data.
Infrastructure
Kupros runs on Vercel with PostgreSQL on Neon. All connections encrypted in transit via TLS 1.3. Authentication uses JWT tokens in httpOnly cookies, no client-side access to sensitive session data.