How we protect your home file

How your home file is stored

Inventory records, photographs, receipts, appraisals and policy documents are held in managed Postgres and encrypted object storage, encrypted at rest and in transit over TLS.

Vault files are never public. They are served only through short-lived signed links generated for your session, so a copied URL stops working shortly after it is issued.

Scan data is kept for as long as you choose — 30, 90 or 365 days — and discard-raw mode drops the original capture as soon as the parsed values are saved, so the item keeps its data and the raw image does not linger. The scan log records what changed and when, with provider internals masked.

Stored photographs and documents are fingerprinted with a content hash and a first-seen date, and you can re-verify any file later to demonstrate it existed before a loss and was not altered afterwards.

How access is enforced

Every row in the database carries an owner, and access rules are enforced by the database itself rather than by application code. A request that does not carry your session returns nothing at all.

There is no internal console for browsing customer inventories. Support can see account and billing metadata, not your rooms, values, photographs or documents.

Sharing with an adjuster is explicit and time-boxed: you create a link, it expires, and you can revoke it at any moment.

Share links are passcode-protected with a passcode you can generate in the app and pass on separately. After ten wrong passcodes a link pauses for fifteen minutes, so a leaked URL cannot be guessed open.

Account protection

You can turn on an authenticator-app (TOTP) second factor in Account settings, and sign out of every device at once from the same screen.

You can register a passkey — Face ID, Touch ID, Windows Hello or a security key — as a step-up unlock. Aegis asks for it before an adjuster link is issued or a claim packet is exported, and one confirmation covers the next 15 minutes.

On a device you control you can choose to be remembered for 30 days, so routine shares and exports do not re-ask every time. Remembered devices are listed in Account settings with the date they were trusted and last used, and forgetting one — or all of them — takes effect immediately.

When your account is opened on a device we have not seen before, we email you the device, time and network so an unexpected sign-in is visible within minutes.

Passwords are screened against known breach lists at sign-up and whenever you change them.

Sensitive actions — sign-ins, vault views, adjuster shares, exports and subscription changes — are recorded in an append-only account activity trail that you can read but not rewrite.

Vendors and data handling

We rely on a short list of infrastructure vendors, published in full on the subprocessor page, and we do not sell, rent or broker your data to anyone.

Payment card details are handled entirely by our payment processor. Aegis never sees or stores card numbers.

What we do not claim

Aegis does not hold a SOC 2, ISO 27001 or PCI audit report today, and we will not display a badge suggesting otherwise. We are working through the control set a SOC 2 audit tests — access reviews, audit logging, retention and vendor management — and will say so plainly when that changes.

No service can promise it will never be attacked. What we can promise is that the design limits what a single compromised session or account can reach, and that we will tell affected account holders promptly if customer data is ever exposed.