Skip to content

Security & compliance

Governance is the foundation.

SwiftURL, the branded URL shortener and link management platform made by Emplific.ai, checks every destination against Google Web Risk and other safety rules before a link goes live, and records key actions in a tamper-evident audit log. Both run on every plan, including Free. Here is exactly how it keeps your links trustworthy.

The SwiftURL Compliance and audit log screen: the checks every link passes before it goes live (Google Web Risk, adult content, private IP, shortener chain, destination reachable, HTTPS, PII in URL parameters, domain age, URL validity) above the audit log.
The SwiftURL Link checks list: five checks that block a link and four that flag it before it goes live.

Checked before it's live

What is checked before a link goes live?

A link only resolves for the public after it passes every check below. If something looks wrong, it's flagged before anyone can click it.

Web Risk

Google's blocklist for known-bad destinations.

Malware & phishing

Detection for malicious payloads and credential traps.

Shortener chains

Blocks links that hop through other shorteners.

Private-IP blocking

Stops links pointing at internal or private addresses.

HTTPS enforcement

Flags insecure destinations that skip TLS.

PII-in-URL detection

Catches personal data accidentally left in a URL.

Domain-age signals

Weighs freshly-registered domains more carefully.

Re-checks on edit

Every destination change is re-screened automatically.

A record you can prove

What is a tamper-evident audit log?

Every meaningful action, a link created, a destination edited, a domain added, a consent record exported, is written to an append-only log with a verification hash. When an auditor, a client or a regulator asks what happened, you answer with evidence, not memory.

  • Who did what, when, captured automatically
  • Append-only, hash-verified entries
  • On every plan: 7-day retention on Free, 90 days on Pro, 1 year on Business
The SwiftURL Audit log: tamper-evident, every entry cryptographically chained to the one before it, with filters for created, updated, removed, billing and monitoring events, by source, member and time, and Export CSV.

How is SwiftURL hosted, and how does it handle regulated markets?

Encrypted infrastructure

SSL is provisioned on every branded domain by default. SwiftURL runs on reputable, encrypted cloud infrastructure with sensible security defaults you don't have to configure.

The SwiftURL Domains screen: acme.link and go.acme.com, each verified with SSL active.

For regulated markets

For messaging in India, SwiftURL provides DLT/TRAI-compliant sender headers and DPDP-aligned consent & grievance tooling.

See India compliance
The SwiftURL Create link form with the optional DLT sender header field for links sent over SMS in India.

SwiftURL provides tooling that helps you meet safety, DLT/TRAI and DPDP obligations. It doesn't make your organization automatically compliant; data is hosted on reputable, encrypted cloud infrastructure, and compliance outcomes depend on how you configure and use the platform.

Frequently asked questions

Is safety checking on every plan?

Yes. Safety and compliance checks run on every link, on every plan, including Free. They are not an enterprise add-on.

What safety checks run on a link?

Before a link goes live, its destination is checked against Google Web Risk, an adult content filter, a private IP block, a shortener-chain block and a reachability check, any of which blocks the link. HTTPS, PII in URL parameters, domain age and URL validity raise flags. Link Health keeps watching destinations after launch.

Do you keep audit logs?

Yes. Key actions are recorded in a tamper-evident, hash-chained audit log that you can filter and export to CSV. Retention is 7 days on Free, 90 days on Pro, 1 year on Business, and unlimited with a DPA on Enterprise.

Who can change links and settings?

Access is role-based, with seven roles: Owner, Admin, Developer, Marketer, Analyst, Reviewer and Read only. Separate organizations keep clients or business units apart. See team and multi-org.

How does SwiftURL handle Indian compliance?

It provides DLT and TRAI tooling for SMS sender headers and DPDP-aligned consent and grievance workflows. It is tooling to help you meet obligations, not automatic compliance. See the compliant URL shortener page.

Do you use device fingerprinting?

No. SwiftURL is privacy-first and does not use IP or device fingerprinting for deep linking. See the privacy policy for how data is handled.

Ship links your compliance team will love.

Governance built in on every plan, start free, or talk to us about enterprise needs.