Built to be trusted with the record
An auction house runs on its record: who bid, what hammered, who got paid. The platform treats that record as the asset it is.
The record
Provable, not just stored
Tamper-evident auction ledger
Every live-session event is hash-chained: ask, bid, fair warning, hammer. A disputed result has a cryptographically verifiable history, end to end.
Everything audited
Orders, payouts, overrides, staff actions and support access all write to an audit trail with who, when and why.
Backups that survive bad days
Nightly encrypted backups to versioned storage plus an off-cloud, object-locked mirror: a ransomware-resistant copy on separate infrastructure. We restore from the real backups to prove they work: last drill 2 July 2026, back up in minutes.
Tenant isolation
Multi-tenant with hard isolation enforced on every query. Your data is yours; support access appears in your own audit log.
Credentials encrypted
Every connector credential is encrypted at rest: payment, bookkeeping, shipping, email. Video playback links are signed and expiring.
EU hosting
Hosted in the EU (Google Cloud, northern Europe). Automated uptime, CPU, memory and disk alerting, plus a standing rule that nothing ships during anyone's closing window.
Bidder integrity
A clean room, online too
Identity, verified
BankID and MitID verification gates bidding where the house requires it; a second approval tier acts as your credit check before live bidding.
Abuse, blocked
IP blocklists, duplicate-registration guards, disposable-email rejection and login lockouts keep serial non-payers and bots out.
Self-bidding, impossible
Consignors linked to their bidder accounts are structurally blocked from bidding on their own lots.
Ask us the hard questions
Bring your IT advisor or accountant. The demo covers the record, the backups and the books.
Bastionen Auktioner runs weekly hybrid sales on their own domain at basti.dk
Not demo-ready? Write to us instead.