Security
A full security page, with the subprocessor list and the controls behind it, follows once the product is in production. The architectural commitments are set already.
We never hold funds. Payment for a buyback runs bank to bank between the two sides. Countersign watches for a transfer matching the reference and the amount, and waits for both sides to confirm it. There is no balance here to take.
Bank connections are read-only. Where a cleanup matches payment automatically through Mercury, Brex or Plaid, the access used is read-only by design.
Gated steps stay gated. Board consent and ledger documents are not released until the release is signed and the money has landed, so a half-finished deal cannot reach your board.
To report a vulnerability, write to security@countersign.co.
Questions in the meantime: hello@countersign.co