The Compliance & Legal Vault module is built for store owners operating in highly regulated industries (such as vape, alcohol, or CBD). It provides the necessary tools to enforce legal agreements, maintain secure audit logs, and securely handle sensitive customer identity documents without violating privacy laws.

1. Document Privacy & Vault Retention

When using the Manual Identity Verification (KYC) feature, protecting your customers' sensitive data is critical. By default, our plugin automatically and securely deletes identity documents from your server immediately after an admin approves or rejects them.

However, if your local jurisdiction requires you to maintain a record of verified IDs, you can override this behavior:

• Enable Secure Vault Retention: When toggled on, uploaded documents are not deleted. Instead, they are moved into a hidden, .htaccess-protected directory on your server. These files cannot be accessed via direct public URLs; they can only be streamed securely by administrators from inside the WordPress dashboard.

• Enable Auto-Watermarking: To protect your customers from identity theft, this feature automatically stamps uploaded ID images with your website's name and the current date. This ensures the document cannot be reused elsewhere if intercepted.

2. Agreements & Audit Logging

Demonstrating that users explicitly consented to your rules is a core part of legal compliance.

• Require Terms & Conditions: Activating this toggle forces users to check a mandatory agreement box before the "Yes, I am 18" or "Verify Age" buttons become clickable.

• Custom Agreement Text: You can completely customize the terms text in the provided text box. Standard HTML (like <a href="...">) is supported so you can link directly to your Privacy Policy or Terms of Service pages.

• Enable State Audit Logging: For state audits, you need proof of who entered your site and when. Enabling this feature writes a secure, lightweight log to your database for every successful verification. It records the user's IP Address, Country, User Agent (Browser/Device), and Timestamp.

3. Export State Audit Logs

If a state regulator or legal authority requests proof of your age verification practices, you can instantly generate a compliance report.

• Download CSV Report: Click this button to download a complete, chronological history of your successful verifications.

Security Warning: This CSV file contains sensitive, personally identifiable information (IP addresses). Please handle this file securely and delete it from your local computer after submitting it to the relevant authorities.