Security & privacy

Built to protect the most personal data there is.

Zults handles sexual-health results and identity verification. We treat that data with the rigour of a medical device — encrypted, minimised, and always under your control.

Encrypted in transit and at rest

Your connection is secured with modern TLS, and your health records are encrypted where they are stored. Sensitive fields are encrypted at the application layer on top of full disk-level encryption.

Verified identity, not just a screenshot

Rezults are tied to a verified identity — a government-issued ID checked against a live selfie. If your profile photo later stops matching your verified reference, your credentials are automatically revoked. This is what stops a Rezults card being passed off as someone else's.

You stay in control of who sees what

You choose whether to show or hide your legal name; your verified photo stays as proof of identity. You can disable any share link at any time, and changes to your privacy settings apply to every existing link instantly.

Delete means delete

When you delete your Rezults or your account, we hard-delete your records from our production systems immediately — there is no soft-retention window. Encrypted backup snapshots age out on their own schedule, and some records are kept only where the law requires it.

Trusted, EU/UK-based infrastructure

Zults is hosted on Amazon Web Services — a provider certified to ISO 27001 and SOC 2. Data is stored in the UK and EEA, with secure backups in the US protected by Standard Contractual Clauses.

Minimal data, short-lived by design

We keep only what we need. Uploaded PDFs are deleted once your Rezults card is created; identity selfies are removed within 24 hours and ID captures within 30 days. We never sell your data and use no advertising trackers.

Your data-protection rights

Under UK GDPR and EU GDPR you can access, correct, export or delete your data, and withdraw consent at any time. eWellness Limited is the data controller, supported by an appointed Data Protection Officer (The DPO Centre). To exercise your rights, email contact@myrezults.com.