Evidence. Oversight. Confidence.Sign in →
ZONEPROOF HELP CENTREProduct guide · updated 22 October 2026

Answers for every part of ZoneProof.

Understand how the app works, who can do what, and how to resolve common problems.

4 answers across all topics

Privacy & securityWho can see our evidence and what leaves ZoneProof?

For: Everyone

Normal access is organisation-scoped and role-checked. Explicit group oversight grants expose the stated read-only company scope; external rooms expose the selected frozen material. Transactional email providers receive addresses and account/action access messages. The evidence assistant uses no external model. Blockchain anchoring publishes a digest when enabled. Review connected provider permissions and your organisation's disclosure policy before sharing.

Privacy & securityAre SSO, MFA, site permissions and data-residency guarantees included?

For: Everyone

SSO/MFA and site/field-level permissions are not implemented in this pilot. The current hosting setup is not an Australian data-residency commitment. Do not infer certifications, retention guarantees or availability SLAs from the interface. The technical maintainer should validate security, backup recovery, residency and capacity against client requirements before wider rollout.

Privacy & securityCan I delete historical evidence or request a complete data export?

For: Everyone

Published reports, ledger history and captured submissions are preserved by the application; there is no general self-service purge or complete organisation-export workflow. Report PDFs, meeting PDF/HTML and ledger proofs are targeted exports. Ask your administrator and technical maintainer to handle approved retention, complete export or deletion requests using an auditable procedure that preserves required records.

Privacy & securityWhat should I never send in a support request?

For: Everyone

Do not send passwords, reset/invitation/review-room links, API keys, OAuth tokens, database URLs, signing secrets, private wallet keys or unredacted evidence. Share the page, approximate time and timezone, non-secret record/job ID, visible error, role and redacted screenshot. Use an approved secure channel if an authorised investigation needs private records.