Everything that protects the details, explained in plain terms. Each one is something the system cannot do, not just something we promise not to do.
Six things the system cannot do, even if someone wanted it to.
The client’s phone scrambles the details before anything is sent. The only key that can unscramble them sits on the computer that created the link, and it cannot be copied off that computer.
Our service only holds the scrambled version for a few minutes and has no way to unscramble it. Each one only works with the link it came from, and it is deleted the moment the agent picks it up.
A link can be used once. After that it is closed, and if nobody uses it within 30 minutes it expires on its own. Typing anything else into the address bar just shows a page saying nothing is there.
As the client types, the numbers show as dots. They can tap an eye icon to check them on their own phone. On the agent’s screen, only the last four digits ever appear.
The page the client sees has no trackers, no ads and no code from other companies. There is nothing to install and no account to create, and the page is only allowed to talk to our own service.
The link and the page do not show the agent’s name, the client’s name or any company name. The client’s two confirmations travel with the details for the record, and we keep no list of past submissions.
The details are scrambled on the client's phone with 256-bit encryption, the same standard banks use. The key that unscrambles them is never sent anywhere.
Every link gets its own brand-new key, made on the agent's computer. That key is created in a form that cannot be copied, exported or emailed off that computer.
Our service holds only the scrambled version and has no key to it. Anyone who runs the service, or breaks into it, would see nothing readable.
The scrambled details only open for the link they were made for. If anyone changes a single character, they will not open at all.
A link takes one submission. Picking it up and deleting it happen in the same step, so it can never be collected twice.
A link nobody uses expires 30 minutes after it was made, and expired records are cleared out shortly after. Nothing piles up.
Numbers show as dots while the client types, and the agent's screen shows only the last four digits unless the agent chooses to see more.
Everything travels over a secure HTTPS connection, so the scrambled details are wrapped in a second layer of encryption while in transit.
The page the client sees loads no trackers, no ad pixels and no code from other companies, and it is only allowed to talk to our own service.
Any address other than a live link shows a plain not-found page. There is no home page for the service, no sign-in page and no list of anything.
The client's two confirmations, authorizing the payment and vouching for the details, are scrambled together with the details and time-stamped, so the record and the data cannot be separated.
Links and pages show no agent name, client name or company name. If a link is forwarded or leaks, it says nothing about who it was for.
There is no database of payment details, no list of past submissions and nothing to export. Once the details are in the application, the system has no copy.
Each organization gets its own separate setup, with its own keys and its own web address if it wants one. Nothing is shared between organizations.
We will walk your security or compliance staff through every point above on a call, with the system in front of them.