Where it runs
The application runs on Vercel. Your data lives in a managed PostgreSQL database on Supabase in the EU (AWS eu-west-1, Ireland). Photos and documents are stored alongside it in the same region.
Security and your data
Straight answers to the questions your insurer will ask.
Where it runs, how it is protected, who touches it, and how you get it back. No marketing language; this is the system as it is built today.
Encryption
Every connection to the app, and every connection between the app and the database, is encrypted in transit (TLS). The database and file storage are encrypted at rest by the provider.
Backups
The database provider holds backups, and we take a full backup before any structural change and keep it separately. Nothing changes in production without a restore point.
Audit at the database
Changes to claims, appointments, invoices, estimates, estimate lines and variations are recorded by database triggers, with who, when, and the before and after values on every money field. The application cannot bypass them. Accepted estimates lock.
Your company, your data
Every record is tagged with your company, and nobody outside it can see your data. Staff sign in with an email code, no passwords to leak, and see only the screens their level allows. A manager can suspend a leaver in one click.
Getting your data out
Every management report exports to CSV from the screen. A complete export of your company’s data is available on request at any time, including if you leave. Your data is never a reason to stay.
Who processes your data
We run on established providers rather than our own servers. Each one holds only what it needs for its job.
| Provider | What they do for us | Where |
|---|---|---|
| Vercel | Application hosting | Worldwide network; application servers in the US (Virginia) |
| Supabase | Database and file storage | EU (AWS eu-west-1) |
| Clerk | Sign-in (email code) | US |
| Stripe | Subscription billing | Card details never touch our servers |
| Mailgun | Outbound email: letters, confirmations, invites | EU region |
| Sentry | Error reporting (no claim data in reports) | US |
Who is responsible
The data controller for the Claim Job Control service is BizSmart LLC. Questions about any of this, or a request for your export, come through the contact page and are answered by the founder.
What we do not do
- No advertising trackers, no analytics cookies, no selling of data
- No shared logins: every action is tied to a named person
- No silent edits: the audit trail is written by the database, not the app
- No lock-in: CSV export on every report, full export on request
Next step
Ask the hard questions on the demo.
Bring your insurer’s due-diligence list. Thirty minutes, one claim, and every answer above shown live.