We limit requests to information that is necessary for claim support and identity/authority verification. We do not ask for unrelated details, and we avoid collecting sensitive data unless it is specifically required for filing or recovery.

Files are exchanged through industry-standard, encrypted workflows designed for confidential business records. When requested, we can provide a clear audit trail suitable for internal review, compliance, or vendor due diligence—focused on what matters (receipt, handling, and transmission) without disclosing operational internals.

Access is limited to authorized personnel on a need-to-know basis (least privilege), with controlled handling appropriate for confidential financial and compliance records.

We retain claim-related records for at least 3 years to satisfy recordkeeping requirements. To support post-recovery questions, reconciliation, and audit requests, we generally retain records for up to 5 years. After 3 years, you may request deletion, and we will honor it where permitted.

We act only under written authorization from your designated signer(s). This includes representing your organization for claim submission and, when required, coordinating the collection of supporting documentation from relevant third parties. Authorization is obtained first to ensure verified authority, controlled information sharing, and a clear record of approval.