YChecker Email Verification

At YChecker, maintaining enterprise-grade security infrastructure and strict data isolation is fundamental to our email verification platform. This Security Whitepaper outlines our technical security controls, API key protection, data encryption standards, and threat prevention architecture.

---

1. Data Protection & Infrastructure Security

SSL/TLS Encryption

All data transmitted between clients, browsers, external API consumers, and YChecker servers is encrypted using modern TLS 1.3 encryption. Unencrypted HTTP traffic is automatically redirected to HTTPS.

Zero Permanent Storage for Checked Mailboxes

Target email addresses submitted for verification are processed in memory and never stored in persistent disk databases. Once verification completes, results are returned to the caller and discarded.

---

2. API Key Security & Authentication

• Header-Based Authentication: API access requires a secure X-Api-Key header issued via my.sonjj.com.
• Key Revocation & Rotation: Users can instantly revoke or regenerate API keys from their account dashboard in the event of credential exposure.
• DDoS & Rate-Limit Protection: Edge infrastructure protects API endpoints from brute-force hammering and denial-of-service attacks.

---

3. Compliance & Vulnerability Management

• GDPR Compliance: Full alignment with European Union data processing standards.
• Regular Security Assessments: Automated dependency vulnerability scanning and periodic server patch updates.
• Incident Response Plan: Dedicated technical engineering monitoring to resolve potential security incidents promptly.

---

4. Frequently Asked Questions (Security FAQ)