> ## Documentation Index
> Fetch the complete documentation index at: https://docs.thatsme.com.br/llms.txt
> Use this file to discover all available pages before exploring further.

# Verification & Security

> KYB, SHA-256 hash, traceability, community moderation, and LGPD compliance.

That's Me was designed as a recognition platform with context, authorship, traceability, and technical validation.

## Certificate integrity

Each certificate receives a **SHA-256 hash** generated at the time of issuance. The hash is computed from:

```text theme={null}
post_id | event_id | badge_id | profile_id | user_id | created_at | kyb_verification_id
```

Anyone can verify authenticity at:

```text theme={null}
https://app.thatsme.com.br/certificate/verify/[hash]
```

Verification confirms:

* The certificate was issued by That's Me
* The certificate's core data has not been altered
* Whether the issuer was KYB-verified at the time of issuance, when applicable

<Info>
  The hash is **immutable**. Even if the issuer loses verification later, certificates issued during the verified period continue to retain that record associated with the issuance.
</Info>

## KYB — Know Your Business

Organizations can apply for verification in **Settings → Verification**. Two paths are available:

<Tabs>
  <Tab title="Domain verification">
    ### Status: BASIC

    Add a TXT record to your domain's DNS. Verification is **immediate** and confirms that the organization controls the stated domain.
  </Tab>

  <Tab title="Document upload">
    ### Status: VERIFIED

    Submit the company's official registration document. Review takes **1 to 3 business days**.

    The **VERIFIED** status displays a **verification badge** on the issuer's profile and on certificates issued during that period.
  </Tab>
</Tabs>

| Status       | What it means                                                                                   |
| ------------ | ----------------------------------------------------------------------------------------------- |
| **BASIC**    | Domain control confirmed                                                                        |
| **VERIFIED** | Verification badge visible on the profile and on certificates issued during the verified period |

## Traceability

Each issuance is:

* **Recorded with date and time**, linked to the responsible administrator
* **Kept in the account's action history**
* **Associated with the TM used** in the issuance

<Note>
  Every action performed by an administrator, such as creating events, issuing achievements, and adding members, is recorded internally. This enables historical review and audit support.
</Note>

## Community moderation

If any achievement appears suspicious or out of context, **any platform member can report it** by clicking **"..."** on the post and selecting **"Report"**.

Reports are reviewed by the team with support from automated checks and pattern analysis.

## LGPD and data protection

That's Me operates in compliance with Brazil's **General Data Protection Law (LGPD)**:

* No personal information is disclosed without an appropriate legal basis
* Members can control the visibility of their profile and achievements
* Data can be deleted upon request, in accordance with applicable rules

<Check>
  The platform was designed to give users control over their visibility and their data.
</Check>