Security & Data Protection
ClaimDraft PA — a product of Empowered Solutions Ltd
Effective August 6, 2026
1Overview
ClaimDraft PA is an AI-assisted claim analysis and drafting workspace for licensed public adjusters. This page documents the technical and administrative safeguards we maintain to protect account data and the Nonpublic Personal Information (NPI) contained in claim documents processed by the service.
ClaimDraft PA is currently pre-launch. The safeguards below describe the architecture in place today for the public site, waitlist, and license attestation records, and the standards the analysis workspace is being built to.
2Data classification
| Data type | Classification | Storage & access |
|---|---|---|
| Waitlist details (email, license number, state) | Standard PII | Private database table — no public read access |
| License attestation records | Standard PII / compliance record | Private, append-only table — immutable once written |
| Account information (name, email, firm) | Standard PII | Managed auth service — encrypted, account-scoped access |
| Uploaded claim materials (carrier correspondence, policies, estimates, supporting documentation) | Sensitive NPI | Private storage — account-scoped, time-limited signed URLs |
| Analysis findings and generated correspondence | Work product | Private storage — account-scoped access only |
3Technical safeguards
- All data transmitted over encrypted TLS connections
- Row-level security policies enforce account-level data isolation at the database layer
- Uploaded files stored in private buckets — no public URLs; download URLs are signed and short-lived
- File paths are prefixed with the authenticated account ID, and storage policies deny access to paths outside the requesting account's prefix
- Server-side API credentials are held in the server environment and are never exposed to the browser
- Authentication required for all data access — no anonymous data retrieval
- Privileged operations are recorded in an audit log
4Third-party data processors
| Service | Purpose | Data shared | Their privacy policy |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, uploaded documents, analysis output | supabase.com/privacy |
| Anthropic | AI analysis and correspondence drafting | Text content of uploaded claim documents | anthropic.com/privacy |
Note: Document content is sent to Anthropic's commercial API to produce your analysis. Under Anthropic's commercial terms, submitted content is not used to train their models. Anthropic's own retention and data-handling terms govern how long they hold API inputs; we do not represent that retention is zero. If a document contains information you do not want processed this way, redact it before uploading.
5Professional responsibility
ClaimDraft PA is a professional support tool. It does not replace the judgment of the licensed public adjuster. Every finding and every piece of generated correspondence must be reviewed and approved by the adjuster before it is used on a claim.
6Incident response
In the event of a data security incident affecting NPI, Empowered Solutions Ltd will notify affected users within 72 hours of discovery, consistent with applicable breach notification requirements. Notifications will be sent to the email address on file for each affected account.
7Contact
Security questions or to report a vulnerability: info@claimdraftpa.com