How your clients' information is protected.
Contractor financial statements are among the most confidential documents in surety, and indemnitor information includes personal data your firm is required to protect. This page sets out how the platform handles both, including what is not yet in place.
Encrypted in transit and at rest, with a dedicated key.
- In transit. All connections use HTTPS with TLS 1.2 or higher. Unencrypted connections are refused.
- At rest. Every uploaded document, and the financial figures, agings and analyses read from them, are encrypted by the application with a key held in Azure Key Vault in Canada, separately from the data. This is in addition to the standard encryption of the underlying disks.
- Passwords. Only a one-way hash is stored. No one at Surety Minds can read a member's password.
Stored in Canada.
The application, the database, the document storage and the encryption key are hosted in Microsoft Azure data centres in Canada.
Your agency only.
Every record belongs to one agency, and every request is checked against that agency before anything is read. A record belonging to another firm is refused.
No access by default.
Surety Minds staff cannot open your accounts unless your owner grants time-limited access (1 to 30 days), or a broker shares specific files with a support ticket for 7 days. Every access is recorded in your audit log.
Invitation only, with two-step login.
Accounts are created by invitation. Two-step login with an authenticator app is available, and your owner can require it for everyone. Repeated failed attempts are locked out, and password reset links work once, for 30 minutes.
Two, named in our agreement.
Microsoft Azure for hosting, storage and email, and Anthropic for AI processing. You are notified before this list changes.
Only what each task needs.
Documents are sent to Anthropic to be read, and a prepared summary is sent when you request a written analysis. Your data is not used to train AI models, and Anthropic's standard 30-day retention applies.
Every change is recorded.
An analysis that adjusts a client's balance sheet has to be traceable, for you, for the market, and for anyone who reviews the file later.
- Append-only audit trail. Who changed what, when, and on which record. Entries contain identifiers only, never names, figures or document text, and are kept for seven years.
- Traceable figures. Each adjustment carries its rule or your note, and each statement links to the document it was read from.
- Retention you set. Your firm chooses how long closed files are kept: three years, seven years, or indefinitely. Files past that period are deleted after 30 days' notice, unless your firm chooses to keep them.
- Deletion and export. Export your whole book or a single account at any time. A deleted client or agency is removed after a 7-day grace period with undo, and from backups within 14 days after that.
- Roles your firm controls. Owners and admins manage members. The last owner cannot be removed, and a removed or disabled member loses access within a minute.
- Costs you control. Your firm sets a monthly AI allowance and can see spending against it.
Things we are actively working on.
Cybersecurity is at the heart of how we build Surety Minds, and we keep investing in it. These are the next steps already under way.
- SOC 2 report. Until it is issued, we answer your security questionnaire directly, item by item.
- Independent penetration test. Our own security review has covered the whole platform; an external test will follow.
- Single sign-on. Until then, members sign in with their email, password and, where enabled, two-step login.
- Private network. Today the database and storage accept connections only from the application's own identity; we are moving them onto a private network.
Send us your security questionnaire.
We answer every question directly, including those where the current answer is "not yet", with the date we expect that to change. Our data commitments are written into the agreement you sign, not only on this page.