SECURITY AND DATA

Your claim data,
protected at every step.

A dedicated installation per client, hosted in the European Union, with permissions checked on every request and a record of everything that happens to the data.

01 / FROM THE START

Secure by design,
not as an afterthought.

Each client has its own installation, with its own data and settings, on the same product.

01

One installation
per client.

Each client has its own installation, on a fixed product version, with data kept separate from other clients.

02

Hosted in
the European Union.

Servers are in the European Union, in Germany or Finland.

03

Two-step
sign-in.

Two-step authentication is mandatory for administrators, directors and supervisors, with limits on sign-in attempts.

04

Files
checked.

Every uploaded file is scanned for viruses and kept in private storage, reachable only through temporary links.

02 / TRACEABILITY AND GDPR

The history doesn't
rely on memory.

Changes, access and exports are logged with author and date. Personal data only reaches the people who need it, which supports your GDPR and UK GDPR obligations.

Audit log.Changes with before and after values, sign-ins, document views and downloads, and exports.
Personal data masked.Without permission, personal data arrives masked in the server's response. Revealing a value is logged.
Sessions under control.Sign-in history and remote session revocation. Sessions end every day at midnight.
Isolated workspaces.Isolation between workspaces is enforced on every query and verified by automated tests.
Defined retention.Files only become eligible for deletion 10 years after the claim is closed.

FREQUENTLY ASKED QUESTIONS

Security,
no small print.

Security and GDPR questions
deserve a conversation of their own.

Talk to the team
Where is the data kept?

In an installation dedicated to your firm, hosted in the European Union, in Germany or Finland.

Who can access policyholders' personal data?

Only those with permission. Permissions are checked on the server for every request, roles without permission receive masked data, and every reveal is logged.

Does the artificial intelligence use our data?

Only if AI is switched on for your installation. It ships switched off, and no data leaves the platform until CloudWorks enables it at the client's request. The call log keeps costs and timings, never the text.

Are files sent by policyholders safe?

Every file is scanned for viruses. Upload links only allow uploads, expire on their own and show no claim data.

THE NEXT CLAIM STARTS HERE.

Let's connect
your operation.

Show us how you work.
We'll show you where PeritOS makes a difference.

A conversation about your team. No obligation.

Meet PeritOS.

Tell us a little about your team.

Your request goes straight to the CloudWorks team. Please don't share real claim data.