Trust is part of the product.
GateCode is designed around temporary authority, live verification, strict organisation scoping and data minimisation. Our Trust Centre brings the technical controls and the operational commitments together in one place for families, schools, care settings, businesses and procurement teams.
Security by design
Live verification
GateCodes are checked against the current server state so revocation and expiry remain meaningful.
Scoped organisation access
Operational queries derive organisation context from authenticated server-side membership rather than client-supplied trust claims.
Secure sessions
Server-managed sessions, HttpOnly cookies, same-origin mutation checks, security headers and brute-force controls protect account flows.
Audit-ready events
Key lifecycle events can be recorded for traceability without turning verification into a permanent collector identity.
Privacy by design
GateCode is deliberately structured so temporary collectors do not need permanent GateCode accounts, passwords, identity-document uploads or app installation. The authoriser creates the temporary permission; the receiving organisation verifies it.
- Defined retention and minimisation schedules for temporary authorisation data.
- Self-service account data export and deletion-request controls.
- Processor commitments for organisation-controlled data.
- Clear privacy information for account holders, collectors and organisations.
Procurement-ready documentation
Schools, care providers and larger organisations often need more than a marketing page. GateCode publishes its core data-processing, retention, security and incident-response framework so customers can begin due-diligence with clear information.