How we handle your work

Your intake responses, any optional uploads, and the contact information you provide. We don't ask for sensitive personal data (health, legal, financial account numbers, or information about children).

Responses and uploads are stored in our managed cloud backend. Uploads sit in a private bucket; only you and BPM reviewers can read them.

Your own submissions are visible to you. BPM admins and assigned reviewers can read submissions to triage and respond. No one else.

IQ Portal does not generate recommendations automatically. A BPM reviewer reads your intake and writes the response. If we ever use AI to help draft sections, we'll label that clearly in the deliverable and identify what was AI-assisted.

Row-level security policies in the database scope every read and write to the right account or staff role. Service-role keys live only on our server. Auth uses the standard email/password and Google sign-in flows.

Formal security review and penetration testing are scheduled — this section will be updated when complete.

For data access, correction, deletion, and the legal versions of our terms, see the policies hub. Final policy text is being prepared with counsel; stub pages are labeled accordingly.