The case room — files, chat and timeline — is reachable only by its parties. We tell you plainly what we do: party-only access is enforced at the database level, files are encrypted, stamped with a SHA-256 hash, and access is logged. No marketing spin about “zero-knowledge”.
A room's contents are visible only to its parties — the client and the chosen specialist. Other users of the platform see nothing: no files, no messages, not even that the room exists.
A room has exactly two parties. Every access to files, chat or the timeline goes through a server action that first checks whether you are a party to this room. If you are not, you get no data.
Attachments do not sit at a public address. They go into a private store, are encrypted at rest and transferred over TLS, and can be fetched only through a short-lived, signed URL.
Every file lands in a private bucket encrypted with AES-256. When a party wants to open it, the server — after checking membership — generates a signed URL valid for only a few minutes. After that the link expires and stops working.
The moment it is uploaded, each file gets a SHA-256 hash stored with a date. It is a seal: it lets you prove the document is exactly the same as on the day it entered the room.
A SHA-256 hash is a file's digital fingerprint — change even a single byte and the hash is completely different. By comparing the hash recorded at upload with the file's hash today, any party can show the content has stayed intact since the recorded date.
We want to be honest with you about the limits too. Below is what we genuinely guarantee technically — and what, honestly, we do not promise.
Room data filtered in the database (force RLS), with direct access revoked for the anon and authenticated roles.
Files in a private bucket, encrypted at rest and transferred over TLS.
Hash computed at upload — tamper-evidence and proof of integrity.
Files fetched only via links valid for a few minutes, issued after a membership check.
Access to users' files is recorded; notifications never contain the message body.
A case room is kept 6 years as potential evidence, after which the data is deleted.
A case room is kept for 6 years as potential evidence — in case claims need to be established, pursued or defended. This aligns with GDPR (Art. 17(3)(e)). After that period the data is deleted, and you can download your files at any time in the meantime.
As long as the room exists, both parties can access files, chat and the timeline, and can download their documents at any time.
A closed room is kept for 6 years as potential evidence — to establish, pursue or defend legal claims (GDPR Art. 17(3)(e)).
Once the retention period ends, the contents of the room are deleted. Before then, download copies of anything you want to keep.
Privacy protects your case; verification tells you whom you entrust it to. Two badges carry concrete, checkable meaning — they can't be bought or faked.
The green badge next to a name means we checked the specialist's credentials. The “Verified payment” chip appears when a real, paid engagement stands behind the collaboration — proof that a review comes from an actual client.