How we protect your data
Your credit file is personal. Here is exactly what we do with it, in plain terms.
Your documents are encrypted before they're stored
Every ID and proof of address you upload, and every letter and attorney packet we keep, is sealed with AES-256-GCM before it's stored. The storage provider only ever holds the scrambled version, and each file is locked to its own location, so a copied or swapped file won't open.
Every connection is encrypted
The app only works over HTTPS, using TLS 1.3, and browsers are told never to connect without it. Pages refuse to load inside other sites, and a strict content security policy stops injected scripts from running.
We keep as little as possible
We ask for the last four digits of your Social Security number, never the full number. We never store full account numbers. Passwords are stored only as a one-way Argon2id hash, so nobody, including us, can read them.
Your records are walled off from everyone else's
The database itself enforces who can see each record, not just the app. A request made for one person cannot return another person's data, even if the app had a bug.
You decide who sees your case
Nobody sees your case unless you invite them. If you share it with an attorney, everyone at the attorney's firm can read it but can't change or send anything, and you can revoke access at any moment.
A record that shows if anything changes
Every step you take is written to a log where each entry is linked to the one before it. If any past entry were altered, the chain would no longer check out. You can verify it yourself on your Record tab.
Encrypted backups, kept separately
A full backup is taken every night, encrypted with its own key, and stored with a separate provider. We test that backups actually restore.
What we don't do
We don't sell your information. We never contact the credit bureaus or lenders as your agent: letters go out in your own name, and only after you confirm them. Account and reminder emails only go to the address you verified.
For law firms
A firm sees only the cases its clients share with it, and only to read and download. When someone at the firm opens a case or downloads a file, it's added to the client's record, at most once an hour per person for the case and for each file. The attorney demo uses fictional clients only and can't change anything.
Found a security problem? Email hello@disputeavenger.com. Also see Your Consumer Credit File Rights.