Security recommendations

Follow these recommendations to keep your Realaml integration secure.

Protect your API keys

Do not expose API keys publicly. This includes client-side code such as:

Web frontends

Mobile apps

Public websites

API keys should be used only in your backend systems.

Verifications are stored in the Realaml system for 10 years by default.

Access to verification data is generally restricted after 14 days.

If you want completed or incomplete verifications deleted sooner, contact the Realaml team.

Before requesting deletion:

Ensure you have stored any results and PDFs you need in your own systems.

Once a verification is deleted, you are responsible for retaining copies for future reference.