Immigration documents are sensitive. This page describes what we actually do to protect them. It does not claim certifications we do not hold.
Your account
- Passwords are stored only as a cryptographic hash with a unique salt per account. We cannot read your password, and neither can anyone who obtains the database.
- Sessions use opaque random tokens. Only a hash of each token is stored, so a database compromise does not hand over live sessions.
- Signing out revokes that session immediately. Changing your password revokes every existing session.
- Login, signup and password-reset attempts are rate limited, so an account cannot be attacked by repeated guessing.
- Password reset links are single-use and time-limited, and the response to a reset request is the same whether or not an account exists — so the service cannot be used to discover who is a customer.
Your documents
- Documents are stored outside any publicly accessible web directory. There is no web address that maps to your document.
- Every file is stored under a random identifier. Your original filename is kept only as a label for you, never as a path.
- Opening a document requires you to be signed in and to own the case, or to be the staff member reviewing it. Any other request cannot even confirm the document exists.
- Uploads are verified by inspecting the actual content of the file, not just the name or type it claims — so a file pretending to be a document is refused.
- Downloads are served as attachments with caching disabled, so a document is not left in a browser cache or rendered as a page.
- You can replace or delete any document you have uploaded. Deleting removes the file, not only the record.
Payments
- Card details are entered directly with our payment provider and never pass through Clarenor. We do not store full card numbers.
- Your case becomes active only when our payment provider confirms the payment to our server. A browser cannot make a case active by claiming a payment succeeded.
- Payment notifications from the provider are cryptographically signed and verified, and each event is processed at most once so a repeated notification cannot grant the same entitlement twice.
The service itself
- All traffic is served over HTTPS.
- We set standard protective headers, including a content-type policy, framing protection, a referrer policy and HSTS.
- Browser access is restricted to an allowlist of known origins. An unknown website cannot read your authenticated data.
- Error responses never disclose internal details, file paths or credentials.
- Actions on your case are recorded in an audit trail, so misuse can be detected.
What we do not claim
We do not claim to hold ISO 27001, SOC 2 or any other certification, because we do not. We do not claim to be HIPAA compliant. We do not claim a security guarantee: no online service can honestly offer one. What we offer is the specific, verifiable set of protections described above, and a commitment to tell you plainly if something goes wrong.
If something goes wrong
If we become aware of a breach affecting your information, we will tell you what happened, what information was affected, and what we are doing about it. Contact us immediately if you suspect unauthorised access to your account.
Reporting a security issue
If you believe you have found a security problem in this service, please tell us before disclosing it publicly. We will acknowledge your report and keep you informed.