By creating an account, completing checkout, or using NO COMPLIANCE, you agree to the Terms of Service, Privacy Policy, Subscription & Refund Policy, Acceptable Use Policy, Professional Disclaimer, and Electronic Signature Consent (effective August 16, 2026). These policies are offered by OBANVAL INC for the NO COMPLIANCE product within NO UNIVERSE.
Security Overview
Technical and organizational controls implemented in the Service.
Effective August 16, 2026 · OBANVAL INC · EIN 33-1234349 · 1166 Bear Corbitt Rd, Bear, DE 19701, USA · NO COMPLIANCE
Our commitment
NO COMPLIANCE is a product of NO UNIVERSE, provided by OBANVAL INC (EIN 33-1234349).
Confidentiality of firm and client data is a core product requirement. Access is designed so users see only what their role and assignments allow.
Access control
Role-based access (owner, admin, staff, client). Client users are limited to assigned companies. Document view, download, and sign require authentication and permission checks.
Isolation
Each organization is a tenant. APIs that touch company records confirm the company belongs to the signed-in organization.
Sessions and transport
Sessions use signed JWTs in httpOnly cookies, Secure in production, SameSite=strict. Production traffic is served over HTTPS.
Account security
Email verification is offered at registration. Organization owners and admins may enable time-based one-time password (TOTP) two-factor authentication. Sessions can be revoked from security settings.
Secrets at rest
Passwords are hashed with bcrypt. Vault entries, selected company portal credentials, identity numbers, and bank portal passwords are encrypted at rest with AES-256.
Signatures and audit
Completed electronic signatures store consent and signature metadata (including IP and user agent) with the signed file. Security-relevant account events may be recorded in an audit log.
Abuse resistance
Sensitive authentication and registration endpoints use rate limiting. Plan seat and company limits are enforced to match purchased entitlements.
Reporting
Report security concerns to nocompliance@nestorobando.com.