Xwork

Trust, safety & security

Get started
Trusted byNorthwindAcmeGlobexInitechUmbrella

Protecting your data is our top priority

Xwork follows modern security and privacy best practices designed to give clients and freelancers a safe, reliable place to work together — so you can focus on the work, worry-free.

Data protection

Your information is encrypted in transit and at rest, and access is tightly controlled so only the right people and systems can use it.

Read our Privacy Policy

Standards & compliance

We align our practices with widely recognised security and privacy standards, and review them regularly as the platform grows.

Read the User Agreement

Information security

We monitor, test, and continually improve our systems to keep the marketplace reliable and your data safe.

Learn more

Access and authentication

Strong sign-in

Strict password rules and a clear strength meter help every account start out secure, with more protection options on the way.

Verified identities

Freelancers complete a one-time identity check before they can get paid, so both sides know who they're working with.

Secure sessions

Sessions are protected and you can log out from anywhere through your account settings at any time.

Asset protection

Data encryption

We protect data in transit using HTTPS/TLS and keep it encrypted at rest, guarding against eavesdropping and tampering.

Malware & spam protection

Messages and uploaded files are scanned to help protect you from malicious links, attachments, and spam.

Confidentiality & IP rights

Ownership of completed, paid-for work transfers to the client, and you can agree confidentiality terms that fit your project.

How we keep Xwork safe, end to end

Safety on a marketplace isn't a single feature — it's a set of protections that work together from the moment you sign in to the moment you get paid. Here's the whole picture.

1

Verified identities

Trust starts with knowing who you're dealing with. Every freelancer completes a one-time identity verification before they can be paid — they submit a government-issued document and a live selfie, and our system checks that the face matches and that the name and country line up with their profile. Where an automated check can't be completed with confidence, a member of our team reviews the documents manually before approving.

Each person may verify only one active account, and the same document cannot be used to verify a second account. This keeps out duplicate and throwaway accounts and makes the reputation you build genuinely yours.

2

Payments protected by escrow

Money on Xwork is protected on both sides by escrow. On a fixed-price contract, the client funds each milestone before the freelancer begins, and the funds are held securely — not paid out — until the client approves the work. Freelancers can see the money is secured before they start; clients only ever release funds for work they've approved.

If a contract ends while funds are still in escrow, those funds are handled fairly: they return to the client when work wasn't delivered, and a freelancer who believes they're owed can open a dispute that freezes the funds until it's resolved. Nothing is quietly released to the wrong party.

3

Fraud monitoring and financial-crime checks

Behind the scenes, we run automated checks designed to detect and prevent fraud, money laundering and abuse. We look at signals such as the reputation of the network you sign in from (including whether it's a known VPN or proxy, which isn't permitted), the email domain used to register, whether an ID's issuing country matches the profile, and how many accounts share a single network.

When something looks wrong, we can hold or reverse a transaction, request more information, or restrict an account while we investigate. These checks protect the honest majority from the small number who try to abuse the platform.

4

On-platform communication and the five-strike rule

Keeping conversations and payments on Xwork is what lets us protect you — it's why escrow, dispute help and our records exist. Our system scans messages, cover letters and contract chat for attempts to move contact or payment off the platform.

If a message tries to take things off-platform, it isn't delivered and you receive a warning, with a notice on your profile and an email to your account. After five warnings, the account is permanently suspended. Stay on Xwork and you'll never see a warning — and you'll keep every protection the marketplace provides.

5

Honest reputation signals

Ratings and reviews come only from real, completed contracts, so the work history you see is genuine. On top of reviews, we compute a Job Success Score and award Rising Talent, Top Rated and Top Rated Plus badges automatically against published criteria — and remove them just as automatically when the criteria are no longer met.

Reviews and scores may never be bought, sold, traded or coerced, and trying to game them — or moving payments off-platform — costs a freelancer their badge and eligibility to earn one again for six months.

6

Fair dispute resolution

Even good working relationships sometimes hit a snag. If a client and freelancer can't resolve something directly, either side can open a dispute. The affected escrow is held while both parties share their account of what happened, and Xwork (or a neutral mediator) helps reach a fair outcome — a refund, a release, or a split that reflects the work actually done. A dispute also opens a tracked ticket in your support requests so nothing falls through the cracks.

7

Your account, your controls

You have real tools to protect yourself: strong password requirements with a live strength meter, optional two-step verification, a security question for recovery, visibility over connected sign-in methods, and the ability to change your password or close your account at any time. Sensitive changes ask for your password before they take effect.

We store only what we need and only in a safe form — for payout methods, for example, we keep a masked reference such as the last four digits, never your full account number.

8

Data security and privacy by design

Your data is encrypted in transit and at rest, access is tightly restricted to the systems and people who genuinely need it, and identity documents are used only to verify you, enable payouts and prevent fraud — never for advertising. Our full approach to what we collect, why, and your rights over it is set out in our Privacy Policy.

9

Reporting and responsible disclosure

Safety is a shared effort. If you see something that doesn't feel right — a suspicious job, an off-platform request, or abusive behaviour — report it through Help & support and we'll look into it quickly. If you're a security researcher and believe you've found a vulnerability, report it privately and give us a chance to fix it; good-faith disclosure is always welcome.

Resources to help you succeed

View all
Guide

How leading teams work with freelancers

Read guide →
Guide

Working securely with remote freelancers

Read guide →
Guide

Setting up a safe remote workflow

Read guide →