Trust

The facts a firm collects before it uploads.

• Records are processed and stored in the United States, on Amazon Web Services in the us-east-1 region. They are encrypted in transit and at rest.
• Each firm’s records are isolated from every other firm’s, and the isolation is tested. The subprocessors are Amazon Web Services, Stripe, Cloudflare and Google Workspace. No record is sent to an AI model.
• A BAA is signed before any record is uploaded.
• Files are deleted after 90 days, sooner on request.
• Reviewers are based in the United States and work under confidentiality agreements. Claracord organizes and extracts; a person verifies.
• Security reports go to security@claracord.com, which is also the contact in security.txt. A client account can add a one-time code from an authenticator app at sign-in.

Vendor vetting packet: Download (PDF) · Read

Each line is backed in the claims register.

← Back to the site