Legal
Security
Your records include commercial terms, supplier evidence and product passports that have to stand up to an authority request. Here is how Bostyn protects them.
Access control
Every record is scoped to your organisation, and roles decide who can read, propose, approve or publish. Supplier access is limited to what has been shared through the portal.
Two-factor authentication can be required for everyone in the organisation, with an authenticator app or a text message.
Audit history
Activity and trade decisions are recorded in an append-only, hash-chained log: each entry links to the one before it, so the history can be shown to be intact.
Documents and passports
Uploaded documents are stored privately and served through signed links that expire. Published passports show only the fields marked public; anything else stays behind a signed-in check.
Reporting a problem
If you think you have found a security issue, email us before disclosing it publicly. We will confirm receipt, investigate and keep you updated on the fix.
Questions about this page? Email hello@bostyn.trade.
Last updated 5 November 2026. This summary explains how Bostyn works in plain language; it is not legal advice.