Data Security

Security is our top priority. Learn how we protect your data.

Data Protection

Encryption

• •In Transit: TLS 1.3 encryption for all connections
• •At Rest: AES-256 encryption for stored data
• •Photos: Encrypted storage in secure cloud

Infrastructure

• •Hosted on enterprise cloud providers
• •Multiple availability zones
• •Automatic failover
• •Regular backups

Access Control

• •Role-based permissions
• •Two-factor authentication available
• •Session management
• •Audit logging

Compliance

Standards

• •SOC 2 Type II certified
• •GDPR compliant
• •CCPA compliant
• •PCI DSS compliant payment processing

Data Processing

• •Data processed in your selected region
• •No data sharing with third parties
• •Minimal data collection
• •Clear data retention policies

Security Features

Account Security

• •Strong password requirements
• •Two-factor authentication (2FA)
• •Login notifications
• •Session timeout

Data Access

• •Granular permissions
• •Audit trails
• •Data export
• •Right to deletion

API Security

• •API key authentication
• •Rate limiting
• •IP allowlisting (Enterprise)
• •Webhook signatures

Privacy

What Data We Collect

• •Account information
• •Claim data you submit
• •Usage analytics
• •Support communications

What We Don't Do

• •Sell your data
• •Use data for advertising
• •Share with third parties unnecessarily
• •Access your data without reason

Data Retention

• •Active account: Data retained
• •Cancelled account: 30 days then deleted
• •Upon request: Immediate deletion available

Your Controls

Export Your Data

Settings > Data lets you:

• •Export all claims
• •Export analytics
• •Export customer data

Delete Your Data

Request deletion of:

• •Specific claims
• •Customer data
• •Entire account

Reporting Issues

Found a security issue?

• •Email: security@claimport.io
• •Bug bounty program available
• •Responsible disclosure policy