Security and trust

Built so every figure can be trusted

Recovery work involves sensitive financial and personal information. Security and traceability are part of the design, not an add-on.

People to approve an entry
2
Balances typed by hand
0
Actions on the audit log
All
A woman signing in to her client portal on a laptop while checking a code on her phone.
Your case, only for youPrivate, role-based access
Financial integrity

Enforced by the database, not by trust

  • The ledger is the source of truth. Recovered and remaining amounts are calculated from approved entries. No one can set a balance directly.
  • Two-person approval. A different person must approve each financial entry, and the database refuses anything else.
  • Entries can't be rewritten. Mistakes are fixed with a visible correction or reversal, with a written reason.
  • Pending means pending. Clients only see approved entries, so unverified amounts never reach a dashboard or statement.
A reviewer at her desk, looking up from her laptop.

How an amount reaches your dashboard

Every recovery, adjustment or correction takes the same four steps. There are no shortcuts.

  1. Record

    A team member enters the amount, type, reference and a written reason.

  2. Hold

    The entry waits as pending and doesn't touch your figures.

  3. Review

    A different person approves or rejects it. Nobody can approve their own entry.

  4. Post

    Your dashboard and statement update, and you get a notification.

The approvals queue, where a second staff member approves or rejects each pending entry.

The approvals queue: a second team member approves or rejects each pending entry.

A record of every action

The audit log is append-only. It captures who did what, when, from which address, and the values before and after.

The audit log listing actions with timestamps, users, clients and changed values.
Who When What changed Can't be edited
A man photographing a paper bank statement with his phone to upload it securely.
Your documents

Sensitive files, handled carefully

Statements, IDs and messages are the heart of your claim. We keep them private and track every time they are opened.

  • Stored outside the public website
  • Served only after an access check
  • Every view and download is logged
  • Shared only with the people working on your case

Account and data protection

Access

  • Role-based permissionsStaff access is limited to their role. Clients reach only their own cases.
  • Strong password hashingTemporary passwords must be changed at first sign-in.
  • Session expiryInactive sessions end automatically. Sign-in history is visible to every user.
  • Sign-in rate limitingRepeated failed attempts are blocked for a period.

Data

  • Private file storageFiles are kept outside the public site and served only after an access check.
  • Document access loggingEvery view and download is recorded.
  • Forged-request protectionEvery form carries a token, and strict browser security headers are set.
  • Careful notificationsAlerts point you to the portal for the details.
An older woman on an anxious phone call, holding her bank card.
Protect yourself

We will never ask you for

  • Your password or one-time codes
  • A fee, tax or deposit to release money
  • Payment in crypto or gift cards
  • Remote access to your device

Only sign in at this website's address. If you get an unexpected request about your case, check it through secure messages in your portal before you act.

How to spot a recovery scam

Security questions

Can a member of staff change my balance?

No. Balances aren’t typed in. They are calculated from ledger entries, and every entry must be approved by a second person before it counts. The database itself refuses anything else.

What happens if a mistake is made?

The original entry stays on record. A correction or reversal is added with a written reason, so the full history is always visible.

Who can see my documents?

Only you and the staff working on your case, based on their role. Files are stored privately, and every view and download is logged.

How will you contact me?

Notifications point you to your portal for the details. We will never ask for your password, one-time codes or a payment to release money.

I got a suspicious message about my case. What should I do?

Don’t act on it. Sign in to your portal by typing this website’s address yourself and check your secure messages, or contact us using the details on this website.

Already a client?

Sign in to see your case, documents and every approved figure.