Security

Certificates of insurance include names, addresses and policy details. This page explains, in plain words, how we look after them.

Where your data lives

• The website and the certificate checks run on a server in Virginia, USA.
• Your files and the information read from them are stored in Virginia, USA.

Encryption

• Everything between your browser and us travels over HTTPS.
• Stored files and the database are encrypted at rest.

Every upload is checked

• Every file is scanned for viruses before anything else touches it. Infected files are deleted.
• Only PDF certificates (or a zip of them) are accepted, with size limits and checks against harmful files.
• Forms are protected against bots and abuse.

Who can see your files

• Only the founder, to prepare your report. There is no team, and no one else has access.
• Admin tools are not on the public internet; they are reachable only from the founder's own devices.
• We never write certificate contents to our logs.

How long we keep it

• Free scan uploads, and everything read from them, are deleted 30 days after upload.
• Certificates you check on the demo page are processed in memory and not stored.
• Ask us any time and we delete your data sooner.

AI

Typed and fillable certificates are read without AI. Only scanned certificates are read by Google's Gemini AI, on a paid plan whose terms say your data is not used to train their models. A person checks every value the AI reads before it reaches you, and pass or fail is decided by fixed rules, never by the AI.

What we never do

• Sell or share your data.
• Use your certificates for marketing or for anything other than your report.
• Contact your vendors or their insurance agents without your say-so.

Questions, deletion and reporting a problem

Email [email protected]. If you think you have found a security problem, please tell us there; we reply within one business day. More detail in our privacy notice.