The details you share tell the story of your home. Account checks, private files, and clear sources help protect those records and make the information you use easier to understand.
The Right Records. The Right Account.Dashboard Preview · Demo Data
Care For What You Share. Clarity In What You See.
01
Your Account.
Auth & Database
Supabase Auth handles sign-in and stores passwords as salted bcrypt hashes. Its Postgres database holds saved dashboard records. Session checks and database access policies connect private requests to the right account and home.
Protected Password Hashes
Row-Level Access Rules
02
Your Documents.
Private File Storage
Supabase Storage holds policy documents, photos, and Vault files in private buckets. Ownership rules and account checks control access. Authorized files open through signed links that expire, with format and size limits for uploads.
Private Storage Buckets
Expiring Signed Links
03
Our Infrastructure.
Managed Cloud Infrastructure
Our Supabase database, Auth service, and Storage run in a U.S. AWS region. Supabase protects stored customer data with AES-256 and connections with TLS. Provider audits and certifications support this foundation; Policy Angel manages its application permissions.
AES-256 At Rest
TLS In Transit
04
The Information You Use.
Weather & Federal Program Sources
NWS alerts and NOAA severe-weather reports add official weather context. Grants.gov and SAM.gov supply federal funding information. Source links and recorded dates help you review that context alongside licensed property information and the records you share.
Official Government Sources
Source & Date Context
Protection Has More Than One Layer
A Protected Foundation.
Established cloud services support the platform. Our own access checks connect those protections to your account and your home.
Supabase
Accounts, Records & Private Files
Our account, database, and private document services run on Supabase. Its published security standards include independent audits, certified security management, and encryption.
SOC 2 Type II
Independent audits of security controls over time.
ISO 27001
Certified information security management.
AES-256 + TLS
Supabase encrypts stored customer data and connections.
Our Supabase project runs in a U.S. Amazon Web Services region. AWS maintains independent certifications and audit reports for the cloud services covered by its programs.
ISO 27001
Information security management.
ISO 27017
Security controls designed for cloud services.
ISO 27018
Personal information protection in the public cloud.
These credentials belong to Supabase and AWS within their published scope. Policy Angel maintains its own application permissions and account protections.
Access Starts With Your Account.
Requests for private home records verify your sign-in and your permission to access that home. Database row-level policies add another boundary around member information.
Private Files. Time-Limited Access.
Private document storage works alongside account and home access checks. Protected file viewing verifies permission before creating a link that expires, rather than a permanent public document link.
Clear Sources. Better Context.
Know Where The Information Starts.
Government sources are an important part of our ecosystem. We also use licensed property information, program-provider details, and the records you choose to share.
.gov
Check the source, recorded date, and program requirements. Return to the original provider for current eligibility, deadlines, and application instructions.
Weather data can be delayed or revised. For urgent instructions, follow NWS alerts and your local emergency officials.
weather.gov
Official Weather Alerts
National Weather Service
Official National Weather Service alerts provide weather context for Guardian Mode.
Asking for help brings people into the process. Our support workflow uses specific authorization checks and keeps internal review separate from the updates shared with you.
01
Your Saved Request
02
Authorized Staff Review
03
Your Published Update
Authorized People. A Verified Session.
The staff request workflow checks current authorization and requires multifactor verification before access to support records.
Private Notes Stay In The Staff Workflow.
Internal staff notes are separate from updates published to the member. You can follow your request without seeing internal working notes.
Uploads Have Defined Limits.
File format and size checks help keep uploads within the supported document and photo types. Confirm the selected home before adding a file.
Small Habits. Stronger Protection.
Use A Strong, Unique Password.
Keep Sign-In Codes And Reset Links Private.
Upload Only What Is Relevant To Your Home Or Request.