Skip to content
Skip to content

We claim that the product gives your client a notice, records consent, ties a request to one purpose, deletes on time, keeps a record that cannot be changed and handles rights requests, and we say nothing about the rest of your firm's obligations.

Each claim below is about what Confidential Dispatch does. Each one is something you can see in your account. We make no claim about how your firm handles data outside the product.

What we claim

What we sayWhat happens in the productRead more
Your client reads a notice before anything is collectedThe upload page takes no document and no written answer until your client agrees. The notice lists the items, the purpose, the retention and your grievance contact. A published notice is never changed, and a change makes a new version.The notice
Consent is recorded and can be provenEach consent is stored against the exact notice version your client agreed to, with the time and the link they used. Your client gets a receipt.Consent
Each request has one purposeThe request names the purpose, the notice states it and the documents belong to that request.Purpose
Data is deleted when its period endsEach item has its own date from the retention rule, a law's period included. It is deleted in the first nightly run after that date, unless you renew it or keep it on a basis of your own. A withdrawal deletes at once, unless the request named a law or you kept the item under a law.Retention
Every relevant action is on a record that cannot be changedEach entry carries a SHA-256 fingerprint and is chained to the one before. Once a day we publish your latest fingerprint to storage that cannot be rewritten.The proof record
Your client can ask for a copy, a correction or deletionThe receipt carries a private link. You answer within 90 days and every answer is recorded.Rights
Documents are protected and kept in MumbaiDocuments are encrypted with AES-256-GCM, and everything is hosted on AWS in Mumbai.Security

What we do not claim

  • We do not claim that your firm is compliant. Your obligations cover more than the collection. They include your other systems, your other notices and what you do with a document after you download it. Using the product does not settle them.
  • We do not limit what you do with the data. We record the purpose and show it. We do not check how you use a document, and a document you download is yours to protect.
  • We do not give legal advice. The notice is text we compose from what you enter. It does not replace advice on your own situation.
  • We do not claim a certification or an audit report. Our protections are the ones on the security page, and its table says which of them you can check yourself.

How to check a claim

Your evidence export holds your proof record and your anchors, and you can verify it on your own computer. See how to prove to a client or an auditor what happened.