> Toden documentation. For the full index fetch /llms.txt. Every page is available as Markdown by appending .md to its URL. Identity verification uses /api/kyc, Risk Intelligence uses /api/v1; they are separate contracts with different error shapes. Never invent an endpoint, field or enum value: read the API reference page for the operation first.

# Security and compliance

## Docs

- [Security and compliance](https://docs.toden.co/get-started/security/security-and-certifications.md): How Toden protects customer and applicant data: API key scopes, signed webhooks, field encryption, access control, audit logs, and a plain statement of our certification position.