Security and privacy

Your documents are safer here than in a drawer or an inbox.

You are trusting us with sensitive things. Here is how we keep them safe, and how you stay in control.

Encrypted at every step

Everything you send to AfterLoss is encrypted in transit using TLS, and everything we store is encrypted at rest with AES-256. Your documents are never public. They sit in private storage, and any link to a file expires within an hour, so a shared link cannot stay open forever.

UK GDPR, and you stay in control

Your data is hosted in the EU, in Stockholm, Sweden, and we handle it in line with UK GDPR. You are always in control of it. From your settings you can export your information at any time, or delete your account and everything in it. When you delete, it goes.

For the full detail of what we collect, why, and your rights under UK GDPR, see our privacy policy.

Private by design

Every case is walled off from every other - it is visible only to you and the people you choose to invite to help. This is enforced by row-level security in the database itself, so privacy is built into the foundations, not bolted on afterwards.

Backed up every day

Your account records are backed up automatically, every day, so nothing important is lost if something goes wrong. Your uploaded documents are kept in secure private storage, separate from these database backups.

If you delete your account, your information is removed from the live service straight away, and rotates out of the daily backups shortly afterwards as they are replaced.

A clear record

Uploads, downloads, and changes are timestamped, so there is an accurate record of activity on your case. If you are sharing the work with family or a professional, everyone can see what has been done and when.

Can AfterLoss staff see my information?

AfterLoss is a small team, and day to day nobody looks at what you store. Access to customer information is limited to three situations: when you ask us for help and looking at your case is needed to give it, when we are fixing a fault in the service, and when the law requires it. If we need to open your case to help you, we will ask you first.

We never sell your information, we never use it for advertising, and we do not use it to train AI models.

What happens to my information if AfterLoss closes?

Your information is yours, and it is never locked in. You can export everything at any time from your settings. If AfterLoss ever had to close, we would tell you in good time so you could take your information with you, and your data would then be deleted, as set out in our privacy policy.

Questions

If there is anything you would like to ask about how your information is kept safe, we are glad to help. Email us at support@afterloss.uk, or read the full privacy policy.