What leaves your account.
What doesn't.
Ordent merchants share signals about identifiers, not data about people, and not with each other by name. Here is exactly how.
| Layer | What is stored | Where | Who sees it |
|---|---|---|---|
| Your account | Raw events: email, phone, IP, device, payment instrument, behavior. Needed for enrichment and tags. | Your region (Mumbai or Singapore), isolated. | Only you. Ordent processes it under your DPA. |
| The network | Keyed hashes of identifiers (email, phone, device, card BIN + hash, IP /24), your industry category, outcomes you reported, counters. | Singapore. | Nobody directly. It surfaces only as tags. |
| Your response | network.seen_3plus, network.banned_elsewhere, network.chargeback_history. Never the merchant, never the raw value, never an exact count. | API. | You. |
Keyed hashes.
Identifiers are hashed with a key only Ordent holds. You cannot recompute another merchant's hashes; neither can they recompute yours. Raw values are dropped from the network layer after enrichment.
Anonymity threshold.
A network tag appears only when an identifier was seen at two or more other merchants, or in enough events that no single merchant can be inferred.
Category, not name.
In the graph you are "crypto · India", not your company.
Give to get.
Network tags go to accounts that report labels. Contribute & receive is on by default and shown at signup; you can switch to Off in the back-office and keep everything else.
Deletion cascades.
A deletion request you honor deletes the hashes from the network. Network records expire 12 months after the last event.
No external enrichment of people.
Breach lists, disposable-domain lists and IP reputation are signals in your account. They are never written to the network as facts about a person.
We use Ordent to detect fraud and abuse. Ordent processes device, network and account signals on our behalf in our region, and contributes pseudonymized identifiers and fraud outcomes to a shared fraud-prevention network that no participant can use to identify you or us. You can ask us to delete your data at any time; deletion propagates to the network.
Regional notes for India (DPDP Act 2023), Indonesia (PDP Law) and Singapore (PDPA), the DPA and the Network Participation Addendum are available from the back-office and on request.
Your risk team starts here.
$99 a month, 10,000 events, sandbox before you pay, money back in 14 days if it doesn't fit.