Security & Privacy
Your documents contain some of the most sensitive information about your life. We treat them that way.
How we protect your data
Encryption
All data transmitted between your browser and our systems is encrypted in transit using TLS. Your documents and personal information are encrypted at rest. We use industry-standard encryption protocols and follow security best practices for data storage and transmission.
Access controls
Access to customer data is restricted by role-based permissions. Only the people who need to work on your application — your Case Guide, application reviewers, and authorized operations staff — can access your information. All access is logged and audited.
USCIS accounts
We never request or store your USCIS account password. We do not log into government accounts using customer credentials. You always retain full control of your government accounts. If we help you prepare a filing, you submit it yourself — either online or by mail — through your own USCIS account.
Audit logs
All access to customer data is recorded in audit logs, including who accessed what, when, and why. These logs are regularly reviewed to detect and prevent unauthorized access.
Development & testing
We never use real customer data for development, testing, or training purposes. All testing environments use synthetic, anonymized data.
Session security
Sessions expire after periods of inactivity. Multi-factor authentication is available and encouraged for staff accounts. We follow secure session management practices.
Data separation
Production environments are separated from development and staging environments. Secure backups are maintained with appropriate access controls.
Our privacy commitment
Your personal information belongs to you. We collect only the information needed to provide our services. We do not sell your data. We do not use your personal information for advertising or marketing to third parties. We share information only as necessary to provide your service (e.g., with your Case Guide, application reviewers, or if required by law).
When you upload a document, our systems may analyze it to identify document type, extract key fields (such as document number or expiration date), and ask you to confirm the extracted data. This is done to speed up your application and reduce data entry errors — never for any other purpose.