Institutional validation by PCT La Habana
Every professional goes through a human review by the Havana Science and Technology Park before publishing: verified identity and reviewed credentials, with a reasoned decision. No one can review their own file.
- Uploaded documents pass antivirus scanning and quarantine before reaching the validator.
- Every decision (approve, reject, request changes) is recorded with actor, reason and timestamp.
Immutable double-entry ledger
Every economic movement is posted double-entry into a ledger that is append-only — never edited, never deleted. Entries form a hash chain: tampering with one would break the entire chain after it.
- An automatic invariant checker continuously verifies that the accounts balance.
- Any audit can reconstruct the complete history of every cent.
Frozen terms per contract
When a contract is accepted, the current version of fees and withholdings is recorded inside it. No one — not even the platform — can retroactively change the economic rules of an accepted contract.
- Economic rules are versioned and public as reference values.
- The breakdown (gross, fee, estimated withholding, net) is visible before accepting.
Disputes with appointed mediation
If a milestone is disputed, direct negotiation happens first inside the platform; without agreement, an appointed mediator decides, and the distribution of the held funds is audited step by step.
- No fund release is arbitrary: it always follows an acceptance or a recorded decision.
- The full dispute file (proposals, deadlines, decision) is traced.
Bilateral, anti-retaliation reputation
Client and professional rate each other blind and reviews are published simultaneously: no one can read the other’s review before writing their own, which removes retaliation.
- Public right of reply on every review received.
- Moderation is non-destructive: it hides with a recorded reason, it never erases history.
Privacy by design
The public profile is built from an allowlist: professional data only. Your ID number is stored solely as an irreversible cryptographic fingerprint — not even the platform can recover it in plain text.
- PII appears masked to staff; unmasking requires a reason and is audited.
- Contact details, address, financial data, documents and employer are never published.
Dual control and 2FA on sensitive operations
Critical staff operations (exceptional releases, rule changes, unmasking) follow the four-eyes principle: one person proposes and a different one approves, both with a second authentication factor.
- No single person can execute a sensitive operation alone.
- Every approval lands in the immutable audit trail.
Sober infrastructure, zero trackers
The platform runs on European cloud infrastructure with encrypted backups. And this website makes not a single request to third parties: no external CDNs, no third-party analytics, no tracking pixels.
- The absence of third parties is checked on every build by an automated test in the repository itself.
- Backups are encrypted, and production access is restricted and audited.