Privacy

SaphanBridge is built on privacy by design. We have designed it with the UK GDPR, the UK Data Protection Act 2018 and Thailand's Personal Data Protection Act (PDPA) in mind.

Your case is stored in London (UK) and encrypted at rest and in transit. Each case is walled off: database access rules mean only you and your partner can see your answers and documents. Advisors you choose to share your case with see only the case bundle you share with them, with identifying details masked. They can open your uploaded files, read-only, only if you turn that on for them, and only until you turn it off or stop sharing. Files open only through links that expire within two minutes.

If you share your case, your advisor can ask you for documents and mark documents as reviewed. Their notes, your replies and review dates are stored with your case and deleted with it. Each advisor sees only their own requests and your replies to them, and only while your sharing lasts. An advisor can also keep their own reference, stage and private notes for your case. Only that advisor sees their stage and notes, and they are deleted when their access ends or with your case. You can see each change an advisor makes to their reference, with their name and firm and the date and time. That record cannot be edited, and it is deleted with your case. If you add your names when sharing, only that advisor sees them, on screen, while your sharing lasts. They are deleted when you stop sharing, and with your case. If you let an Advisor open your files, they can mark each file Approved or Needs changes with a note. Each review keeps their name and firm and the date and time, and is deleted with the file or your case.

If you upload your own edited cover letter, it is stored with your case, because it may include details such as your names and passport number. You and your partner can see it, and so can Advisors while you share a bundle with them. An Advisor can also suggest a revised letter: you see it and decide whether to use it, and it is deleted once you decide. You can remove your letter at any time, and it is deleted with your case.

We keep a record of when documents are uploaded, opened, viewed by an Advisor, reviewed or deleted, when case bundles are created, shared or downloaded, when your case is shared, and when an advisor requests or reviews a document or you reply. This record never includes file names, file contents, notes or replies.

You are in control. You can delete any document at any time, or erase everything below. Erasing deletes your case, answers, documents, case history and account straight away. If your partner has joined your case, erasing deletes only your account, and the case stays with your partner.

SaphanBridge automatically deletes each case, with all its documents, 60 days after it was started, unless you choose to keep it longer, your application has been submitted and is waiting for a decision, or the law requires us to keep it. We email you 14 days and 3 days before your case is deleted. Our hosting providers keep short-lived technical logs (such as IP addresses) for security, and delete them on their own schedule.

AI Evidence Checks are optional and off until you turn them on. If you turn them on, each document you add is sent to Anthropic, the company that makes the Claude AI, which reads it and writes notes on what to double-check. Anthropic acts as our data processor: it uses your documents only to provide this service to us, does not use them to train its AI, and deletes them after a short time. This processing happens outside the UK, mainly in the United States, under the safeguards UK law requires for international transfers. The notes are stored with your case and deleted with the file or your case. You can turn AI checks off at any time on your checklist page, and files you add after that are not sent.

Where SaphanBridge is heading

As SaphanBridge grows, it will go further:

  • Each case will have its own encryption key, rotated automatically, so no two cases share an encryption domain.
  • Raw documents will be deleted automatically as soon as a case bundle is generated. Today, SaphanBridge offers to delete them when you create a bundle, and you choose.
  • Any automated processing of documents will run in isolated environments, with no data shared between cases.
  • Data will be kept in the region each corridor's rules require, including processing Thai data in Thailand where needed.
  • SaphanBridge's compliance with the UK GDPR, the UK Data Protection Act 2018 and Thailand's PDPA will be independently reviewed.
  • Access will be monitored continuously for signs of misuse.

These are commitments for future versions. The section above describes how SaphanBridge protects your data today.