Security & compliance
Your identity and documents, handled to financial-industry standards.
Forming a company and opening accounts means sharing a passport and proof of address. Here is exactly how we verify, store and protect them.
How verification works.
A secure link
You receive a personal link from your client area. Nothing is sent by email attachment or messaging app.
Your document
You photograph your passport or identity card with your phone, then your proof of address. The image is checked for authenticity and tampering.
A short face check
A few seconds of video confirm that you are the holder of the document and physically present.
Screening
Where banks and payment providers require it, your name is screened against international sanctions and watchlists.
Result
Most checks complete within minutes. If something needs a second look, your filing specialist tells you what to provide.
Done once
A verified identity is reused across your company formation and your applications, so you are not asked for the same documents again and again.
A specialised verification provider.
Identity checks are carried out through Didit, a specialised identity verification platform covering more than 220 countries. Your documents go directly into its secure environment rather than into an inbox.
Where your data lives.
In the European Union
Your company file, documents and messages are stored in a database hosted in Ireland (EU), on infrastructure operated by Supabase on Amazon Web Services.
Encrypted twice
Everything is encrypted in transit (TLS) and at rest (AES-256). Documents sit in private storage that cannot be reached by a public link.
Access decided by the database
Who can see what is enforced inside the database itself, row by row: a client sees only their own companies, a specialist only the files assigned to them. The website is never the only barrier.
Two-factor for our team
Nobody at Atiko can open a client file without a second authentication factor, and every action is written to an audit log that cannot be edited or deleted.
No passwords to steal
Clients sign in with a one-time link sent to their email. There is no password to reuse, leak or guess.
Emails from Europe
Our transactional emails are sent through Resend from its EU region, with authenticated DKIM and DMARC so they cannot be spoofed.
How your documents are protected.
Encrypted
Documents are transmitted over encrypted connections and kept in private, encrypted storage in the EU.
Need-to-know access
Only the people working on your file can open your documents, and access is recorded.
Kept only as long as required
Documents are retained for the period the law requires for compliance records, then deleted.
Never sold
We do not sell your data and do not use it for advertising.
Shared only for your file
Documents go only to the registry, bank or payment provider you are applying to.
Your rights
You can ask for access, correction or deletion, subject to legal retention duties.
How to know it is really us.
Our addresses
Emails from Atiko only come from an @atiko.app address, and our links only open start.atiko.app. Anything else is not us.
Bank details never change by email
If a message says our payment details changed, it is fraud. Check in your client area or in the chat before paying anything.
When in doubt, ask in the chat
Forward the message to your specialist from your client area. We tell you whether it is genuine before you act.
What we will never ask you for.
Online banking passwords
You remain the only person with access to your accounts.
One-time codes
No one at Atiko will ask for a code sent to your phone or email.
Card PINs or full card numbers
We never need them to form a company or prepare an application.
Identity verification is performed by an independent provider under its own terms and privacy notice. Face verification involves biometric data, processed with your consent and only to confirm your identity. Didit, Supabase, Amazon Web Services and Resend are trademarks of their owners; Atiko is not affiliated with them beyond being a customer. See our Privacy Policy for full details.
Ready to start your company?
Book a 20-minute call. We tell you exactly what we set up, and how fast.