Skip to main content

Security At Policy Angel

Your Information.
Handled With Care.

The details you share tell the story of your home. Account checks, private files, and clear sources help protect those records and make the information you use easier to understand.

Explore Our Security Approach
01 / 04Layers Of Care
The Right Records. The Right Account.Dashboard Preview · Demo Data

Care For What You Share. Clarity In What You See.

01

Your Account.

MyPolicyAngel

Auth & Database

Supabase Auth handles sign-in and stores passwords as salted bcrypt hashes. Its Postgres database holds saved dashboard records. Session checks and database access policies connect private requests to the right account and home.

  • Supabase AuthProtected Password Hashes
  • PostgreSQLRow-Level Access Rules
02

Your Documents.

Supabase

Private File Storage

Supabase Storage holds policy documents, photos, and Vault files in private buckets. Ownership rules and account checks control access. Authorized files open through signed links that expire, with format and size limits for uploads.

  • Private Storage Buckets
  • Expiring Signed Links
03

Our Infrastructure.

SupabaseAmazon Web Services

Managed Cloud Infrastructure

Our Supabase database, Auth service, and Storage run in a U.S. AWS region. Supabase protects stored customer data with AES-256 and connections with TLS. Provider audits and certifications support this foundation; Policy Angel manages its application permissions.

  • AES-256 At Rest
  • TLS In Transit
04

The Information You Use.

National Weather ServiceNOAAGrants.govSAM.gov

Weather & Federal Program Sources

NWS alerts and NOAA severe-weather reports add official weather context. Grants.gov and SAM.gov supply federal funding information. Source links and recorded dates help you review that context alongside licensed property information and the records you share.

  • Official Government Sources
  • Source & Date Context

Protection Has More Than One Layer

A Protected Foundation.

Established cloud services support the platform. Our own access checks connect those protections to your account and your home.

Supabase

Supabase

Accounts, Records & Private Files

Our account, database, and private document services run on Supabase. Its published security standards include independent audits, certified security management, and encryption.

SOC 2 Type II
Independent audits of security controls over time.
ISO 27001
Certified information security management.
AES-256 + TLS
Supabase encrypts stored customer data and connections.
Source: Supabase Published Standards
Amazon Web Services

AWS

The Underlying Cloud Foundation

Our Supabase project runs in a U.S. Amazon Web Services region. AWS maintains independent certifications and audit reports for the cloud services covered by its programs.

ISO 27001
Information security management.
ISO 27017
Security controls designed for cloud services.
ISO 27018
Personal information protection in the public cloud.
SOC Reports
Independent assessments of covered AWS controls.
Source: AWS Published Standards

These credentials belong to Supabase and AWS within their published scope. Policy Angel maintains its own application permissions and account protections.

Access Starts With Your Account.

Requests for private home records verify your sign-in and your permission to access that home. Database row-level policies add another boundary around member information.

Private Files. Time-Limited Access.

Private document storage works alongside account and home access checks. Protected file viewing verifies permission before creating a link that expires, rather than a permanent public document link.

Clear Sources. Better Context.

Know Where The Information Starts.

Government sources are an important part of our ecosystem. We also use licensed property information, program-provider details, and the records you choose to share.

Check the source, recorded date, and program requirements. Return to the original provider for current eligibility, deadlines, and application instructions.

Weather data can be delayed or revised. For urgent instructions, follow NWS alerts and your local emergency officials.

National Weather Service
weather.gov

Official Weather Alerts

National Weather Service

Official National Weather Service alerts provide weather context for Guardian Mode.

Official Source
NOAA
noaa.gov

Environmental Information

NOAA

Storm Prediction Center reports help put recorded severe-weather events in context.

Official Source
Grants.gov
grants.gov

Federal Funding Opportunities

Grants.gov

Federal opportunities for eligible organizations help inform the broader funding landscape.

Official Source
SAM.gov
sam.gov

Federal Program Descriptions

SAM.gov

Assistance Listings describe federal programs, their purpose, and who they are designed to serve.

Official Source

A Human Hand. A Defined Role.

Support Access With Boundaries.

Asking for help brings people into the process. Our support workflow uses specific authorization checks and keeps internal review separate from the updates shared with you.

01

Your Saved Request

02

Authorized Staff Review

03

Your Published Update

Authorized People. A Verified Session.

The staff request workflow checks current authorization and requires multifactor verification before access to support records.

Private Notes Stay In The Staff Workflow.

Internal staff notes are separate from updates published to the member. You can follow your request without seeing internal working notes.

Uploads Have Defined Limits.

File format and size checks help keep uploads within the supported document and photo types. Confirm the selected home before adding a file.

Small Habits. Stronger Protection.

  • Use A Strong, Unique Password.
  • Keep Sign-In Codes And Reset Links Private.
  • Upload Only What Is Relevant To Your Home Or Request.
More Everyday Security Guidance From CISA

A Clear Place To Turn

Questions About Your Information?

Get help with your account, read how we handle information, or report a security concern directly to our team.