Security and data
Risk information, handled with care.
An insurance submission holds a business’s weak points. PrismX is built so that data stays in the EU, each role sees only what it should, and every signed record can be checked.
Data held in the EU
- The database runs on Supabase in Frankfurt.
- Evidence files and submission packs sit in Cloudflare R2 storage with EU jurisdiction.
- AI requests are the one exception: they carry only the text a job needs, never your files.
Row level security for every tenant
- Every table that holds tenant data carries a tenant and is protected by row level security in Postgres.
- The browser talks to the database with the signed-in person’s own token, so the database decides what they see.
- Server-side writes happen only after the caller’s token is verified.
- Each rule is covered by database tests, role by role.
Each role sees only its own
- An SME sees its own organisation.
- A broker sees only the SMEs assigned to them.
- An advisor sees only the SMEs they are assigned to.
- Insurer reviewers see an SME once it has submitted, or earlier if it shares its progress.
Evidence files
- Uploads go through short-lived signed links, issued after a permission check.
- Allowed types only (PDF, images, Word, Excel, CSV, text and JSON), up to 25 MB, with the file signature checked.
- Each file is hashed with sha256 on the server when it arrives.
- Downloads use links that expire after five minutes.
- Only an advisor or an insurer reviewer can mark evidence verified.
Signatures you can check
- The submission, its answers and the hashes of the evidence it cites are snapshot as JSON.
- The snapshot is hashed with sha256 on the server, never in the browser.
- Signing records typed name, position, email, time, IP address and browser.
- If anything changed since the request, signing is refused.
- A certificate page with both hashes is added to the PDF.
AI as a drafting tool
- AI runs only on PrismX’s server, never from the browser.
- Every output is stored as a draft until a person accepts, edits or discards it.
- Each draft records the prompt version, the model and a hash of its input.
- Prompts tell the model to use only the facts given and to ignore instructions inside documents.
- A daily allowance per tenant limits use.
Sign-in
- Email sign-in links, or Microsoft and Google single sign-on.
- No passwords to store or leak.
- Invites are matched on a confirmed email address.
Not in the first version
We would rather say what is not there yet.
- Malware scanning of uploads. Version 1 limits file types and checks file signatures instead.
- Data export for each SME, for portability.
- Live connectors to scanning and asset tools.
PrismX prepares risk information. Insurers decide eligibility, pricing, coverage and claims. PrismX is not the underwriter or a broker.
Ask us anything
Questions about security or data protection? Write to us and we will answer them directly.