Security Policy
Last updated: [REVIEW: insert adoption date]
We take reasonable steps to protect the information you share with us. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Encrypted connections
The website is served over HTTPS, so information travels between your browser and our servers encrypted.
Protected form submissions
Forms check your entries before sending, and our database rejects entries that are too long or missing required consent. Visitors to the website can submit forms, but cannot read anyone's submissions — including their own.
Database security and access controls
Submissions are stored in a managed database protected by row-level security rules that block public reading. Access to submissions is limited to authorized personnel. [REVIEW: list who has access, whether multi-factor authentication is required, and how data is delivered to participating firms]
Advertising platforms
We do not send accident, injury or medical details to advertising or analytics providers.
Monitoring and incidents
[REVIEW: describe actual monitoring practices and the incident response and breach notification process]
We do not claim any third-party security certification.
Reporting a concern
If you believe you've found a security issue, email support@injurysettlementpros.org.