Security & compliance
Trust is not built with a slogan, but with controls that demonstrably work. Here is what sits under Velvet Red.
Age & consent (18+)
Visitors pass an age check; providers confirm their majority and consent server-side at registration, logged with timestamp and origin. No profile without explicit, logged consent.
Identity and face verification
Verification combines identity documents (MRZ/OCR) with a live face check: liveness detection against photos/recordings and a 1-to-1 match with the profile photos. The live check is non-delegable, it must happen on the person’s own device.
Image scanning against abuse material (CSAM)
Every uploaded photo is scanned before publication. The system is fail-closed: without a successful check, an image does not go live. With PhotoDNA hash-matching, known material is blocked and reported; without a key, manual review follows, never publication by default.
Encryption of sensitive data
Identity documents and other sensitive fields are stored AES-256-GCM encrypted, with key management separated from content. Data stays protected, even internally.
Geo-blocking
Access is blocked in countries where the offering is not legally permitted, via a managed country list with a fail-safe default.
Tamper-evident audit trail
All admin and compliance actions are recorded in a linked, tamper-evident chain (hash chain). Tampering with history afterwards is detectable, essential for regulators and payment partners.
Privacy & discretion by design
There is no chat relay: contact happens directly and off-platform. Visitors have an instant panic exit. In the private network, visibility is off by default and you decide who can find you.
Private Professional Network
A separate, shielded layer for verified agencies and professionals: consent-driven matching, secure messaging, mandatory two-factor authentication for agencies and full separation from the public site.
Our compliance anchors are Dutch/European: GDPR data processing, the Sex Work Regulation Act (Wet regulering sekswerk) and municipal licensing requirements, and EU age verification.