Identity evidence
Passports, proof-of-address documents and other supporting evidence collected through your due diligence process.
Security & confidentiality
Your sensitive information.
Your organisation’s control.
End-to-end encryption protects your sensitive due diligence records and documents before they reach our database. Your organisation holds the keys and controls access, so even ICOS cannot read your protected data or unlock it through a password reset.
Partner’s information
On their device
Encryption
ICOS database
Decryption
Review the records
On your device
Only your organisation controls the decryption keys.
Database access alone cannot unlock your information.
What is protected
Documents, records
and relationships.
Sensitive content is encrypted before it enters ICOS storage and opened by authorised recipients using customer-controlled keys.
Confidential records
Partner submissions, review notes, decisions and historical evidence within the protected workspace.
Ownership relationships
Sensitive ownership details, percentages and the relationships within your partner portfolio.
Access & recovery
You decide who
can open the file.
Account access and permission to decrypt are separate. Your organisation manages authorised access and keeps the means to recover it.
Can ICOS support unlock our records?
Support cannot use a password reset or ordinary account administration to unlock protected content. Recovery stays with your organisation through an authorised administrator or customer-held offline recovery material.
What if someone impersonates a team member?
A login or password reset alone does not grant the keys to existing protected content. New access requires the customer-controlled authorisation process. Your administrators must still verify who they are approving.
What if a colleague leaves or loses a device?
Your administrators remove access, with key updates protecting future content. Removing access cannot erase documents, information or keys that a recipient has already copied. Device security and careful sharing remain essential.
How do we recover access?
Use another authorised customer administrator or the organisation’s offline recovery material. Keep that material somewhere safe, separate from the account it protects. If all customer keys and recovery routes are lost, protected evidence can become permanently unreadable.
Can we take our evidence with us?
You can export evidence, including an encrypted archive that can be opened independently of an ICOS account or subscription using your customer-held recovery material. Store that material separately and test your archive before relying on it.
Automated checks
Only the information
needed for the check.
Checks need some readable information. Customer authorisation defines the scope, and processing is limited to the inputs each check needs.
PEP & sanctions screening
A person’s name
The authorised name is supplied to the screening processor and provider. Your document contents, review notes and full ownership structure are not part of that request.
Gaming licence lookup
A licence number
The authorised licence number is used for the lookup. Your team reviews the licence-holder evidence; the lookup does not require your complete due diligence file.
Ask before you share
Make confidentiality part
of your due diligence.
Talk to us about your organisation’s access, recovery and security requirements before entrusting ICOS with sensitive information.