Security & Trust
This page is maintained by CoverageReady to answer common security and privacy questions about how we protect your data.
Encryption in transit and at rest
All data is encrypted while traveling between your browser and our servers, and encrypted when stored. This includes contracts, COIs, endorsements, and account information.
Multi-factor authentication (MFA)
Every workspace can require MFA for all members. Administrators can enforce MFA organization-wide and monitor enrollment coverage from a central security dashboard.
Role-based access control
Access is scoped by role. Team members see only the contracts, clients, and COIs their permissions allow. No shared passwords or all-or-nothing access.
Row-level security (RLS)
Database policies ensure users can query only the rows they own or are explicitly authorized to access — enforced at the database layer, not just the application layer.
Idle session timeout
Workspace administrators can set automatic session timeouts. After a configurable period of inactivity, users are securely signed out to reduce the risk of unattended access.
Versioned legal acceptance
When terms or policies change, users are prompted to re-accept before continuing. Acceptance is logged with version, timestamp, and method for audit visibility.
Least-privilege operations access
Internal operational access is limited to the minimum necessary. Routine platform health and security monitoring do not grant broad access to customer documents.
SSRF and URL validation
External URL fetches used for document and link processing are validated to prevent server-side request forgery against internal or private network targets.
Shared responsibility
Security is a shared effort. CoverageReady provides the controls above, but customers are responsible for maintaining strong account credentials, promptly removing former team members, enabling MFA when available, and reviewing AI-generated output before relying on it for compliance decisions.
Vulnerability reporting
If you discover a security issue, please contact us at support@coverageready.ai. We review every report and respond as quickly as possible.
Legal documents
For details on data handling, privacy, and terms of service, see our Privacy Policy and Terms of Service.