Security and privacy.Built for cases that must not leak.

Survey cases hold photos from people’s homes, disputes between parties and private notes. Workflows are currently tested with fictional data. Real customer data requires approved agreements, suppliers and privacy arrangements before use.

Status before real data.Requirements and outstanding decisions.

Customer isolation: Applies to all data, files, search, AI context, exports and notifications.; Core principle
AI training on customer data: Information from one organization must not enter another organization’s AI context. Supplier retention and training terms require approval before real data is processed.; Requires review
Data processing agreement: The data processing agreement, processing locations and subprocessors must be reviewed and approved before real customer data is accepted.; Required before use
Retention schedule: Each organization chooses a reviewed retention schedule before real data comes in.; Per organization

How Synfar is built.

Access per assignment: The organization and the assignment are the boundary. A guessed link or a matching address grants nothing, and access is rechecked after role changes and before queued work.
Scoped sharing: Invitations are explicit. A contractor tied to one defect does not see the rest of the case, the property or anyone else’s response.
Originals preserved: Files are stored unchanged. Extracts, crops and redactions are stored alongside, never on top of the original.
A log of what matters: Membership, sensitive views and exports, approval, issuance, sharing and revocation are logged with who, what and when.
Support by consent: Support access must be authorized by the customer, is scoped and time-limited, and is logged.
Documents are data: Uploaded documents are treated as sources. Text inside a document does not authorize the assistant to issue, share or change access.

Retention, exportand deletion.

Before real data comes in, the organization chooses a reviewed retention schedule. We propose starting points, but claim no single legal duration that applies to everyone.

Export: The whole organization or one assignment, with originals, reports, lineage and a list of anything missing.
Deletion: An erasure review shows dependencies and holds before confirmation. Recovery must replay deletions and access changes before serving data. An actual recovery exercise with independent backups remains outstanding.
Audio recordings: Proposed for deletion 90 days after the transcript is reviewed, unless the recording is deliberately kept as evidence.

What we do not promise.

A fingerprint shows the file is unchanged since receipt, not that its content is true.
Revoking access stops future access. Files already downloaded cannot be recalled.
We do not promise both indefinite retention and immediate erasure. The organization’s approved schedule applies.
An upload timestamp is not forensic proof.

See Synfar on your own assignments.Book a demo.

We show you how Synfar fits your services, templates and workflow. Afterwards you can try it free for 14 days.

Book a demo About the product