Built so the worst it can do on its own is read
Your portal accounts carry your licence, your client relationships and your insureds' data. Here is exactly what blnd does with them, and what it never does.
Credentials are encrypted before they are stored
Portal passwords, Gmail tokens and portal session cookies are encrypted with AES-256-GCM, each with its own random nonce, before they reach the database. The key lives outside the database. A copy of the database alone reveals nothing.
Read-only by default
blnd reads what a portal shows you: the assignment, the notes, the photos. It does not accept or decline assignments, change their status, or message insureds, shops or carriers.
You approve every upload
The one thing blnd writes to a portal is your estimate, and only after you approve it, case by case, in the web app or the Chrome extension. Every approval is logged with who approved it and when.
Gmail access is for sign-in codes
When a portal emails a one-time code, blnd searches the connected inbox for that code and uses it to finish the sign-in. It does not read, store or index the rest of your mail.
Workspaces are isolated
Each appraiser or firm is its own workspace. Every query for cases, files and connections is scoped to the workspace that owns them.
Disconnect and delete, any time
Disconnecting a portal deletes its stored credentials immediately. Closing your account deletes your cases, files and connections within 30 days.
What we keep, and for how long
Only what it takes to pull your assignments and write the estimates.
- Portal logins
- Encrypted at rest. Decrypted only inside the job that signs in.
- Claim data and photos
- Encrypted in storage, kept while your account is active.
- Estimate files
- Yours. Download them any time, including when you leave.
- Sign-in sessions
- Encrypted, refreshed as needed, discarded when you disconnect.
Found a security issue?
Write to security@blnd.one. We answer every report, and we will not take action against good-faith research. Firms that need a security questionnaire or a data processing agreement can ask us.
Connect one portal and watch what it reads
Connect your portals in about ten minutes. Your first 10 files are free, and you do not need a card to start.