Security | TraceCover

At TraceCover, we understand that protecting your clients' Non-Public Personal Information (NPPI) is your highest priority and your biggest E&O liability. We engineered our platform from the ground up to ensure you can leverage advanced AI risk intelligence without ever compromising your data privacy or regulatory compliance.

1. The Zero-Retention Architecture

Your clients' policies are your proprietary assets. They do not belong to us.

In-Memory Processing: When you upload a Declarations page or ACORD form for analysis, the document is processed entirely in our secure server memory.
Immediate Deletion: Once the AI completes the comparison and renders the structured data to your dashboard, the original source PDFs are instantly and permanently destroyed.
No PDF Storage: We do not save, store, or archive the raw insurance documents you analyze.

2. Strict AI Model Privacy

We use enterprise-grade AI APIs to process your renewals and claims data.

Zero Model Training: Your data is strictly isolated. Neither TraceCover nor our AI infrastructure partners use your proprietary policy documents or client data to train public AI models.
Session Isolation: Every analysis session is mathematically isolated, ensuring cross-contamination of data between agencies is impossible.

3. Institutional Cloud Infrastructure

TraceCover operates on the same foundational infrastructure used by Fortune 500 financial institutions.

SOC2 Compliant: Our backend systems and database architecture are hosted on top-tier, SOC2 Type II compliant cloud providers (including Amazon Web Services).
US-Based Data Centers: All core processing occurs within highly secure data centers physically located in the United States, minimizing cross-border latency and maintaining compliance with US commercial standards.

4. End-to-End Encryption

Your data is protected at every stage of its lifecycle.

In Transit: All communications between your browser and our servers are encrypted using industry-standard TLS 1.2+ protocols.
At Rest: Any structured account data or saved portfolio metadata stored in our database is encrypted at rest using AES-256 encryption via AWS Key Management Service (KMS).

5. Agency-Level Access Control

You maintain total control over who sees your book of business.

Role-Based Access Control (RBAC): We enforce strict Row Level Security (RLS) policies. An Account Manager can only access data explicitly authorized by their Agency Admin.
Data Isolation: Agency portfolios are cryptographically separated at the database level, meaning it is technically impossible for one agency to query or access another agency's records.

6. Compliance Questions?