Security & data protection
Claim data is sensitive, and we treat it that way. Access is deny-by-default, sharing is consent-first, firms are isolated from one another, and every change is written to an append-only audit trail.
Access is earned, not assumed
Every read and write on a claim passes through one access-control decision point. Nobody sees a claim by default, not even platform staff, who have no blanket access. Firms are tenant-isolated, so a firm only ever sees its own leads and claims.
- Deny-by-default authorization on every claim action.
- Tenant isolation: a firm sees only its own data.
- No blanket admin access to private claims.
Consent-first sharing, always reversible
Property owners choose which firms can contact them, capped and server-enforced, and can withdraw at any time. Firms can grant another firm scoped, expiring, revocable access to a single claim, and contact details stay redacted until a firm accepts.
- Owners name the firms that may contact them; sharing is withdrawable.
- Scoped, expiring, revocable grants for second opinions.
- Contact details unlock only on acceptance.
A record of everything
Every state change is written to an append-only audit log, money and consent actions are idempotent so they cannot double-apply, and uploaded files are scanned, with anything unsafe kept locked.
- Append-only audit trail of who did what.
- Idempotent money and consent commands.
- Files scanned; unsafe files never downloadable.
Common questions
Does platform staff read my claim?
No. There is no blanket access to private claims. Access is deny-by-default and granted only to the people and firms involved in a claim.
Can I stop sharing after I start?
Yes. Consent to share is withdrawable, and scoped access grants are revocable at any time.
On the roadmap
Not available yetWe only advertise what is live. The platform runs today on a development stack, and the production hardening below lands with the infrastructure and auth phases, configured under legal review before go-live.
- Managed Postgres with row-level security mirroring the access model
- Production authentication with multi-factor and SSO
- Encryption at rest and signed, expiring download links
Built around consent and evidence
Learn how the consent-first process and evidence-backed verification work.