Data Security

Last updated: 8 July 2026

This page is maintained by VisaReady and describes the security controls currently enabled in the app. It is not an independent certification.

Authentication

• Email + password sign-in and Google sign-in.
• Sessions are managed by our authentication provider; passwords are never stored by VisaReady.
• You can sign out at any time from the header menu.

Access controls

• Every application, checklist item, and uploaded file is scoped to the user who created it.
• Row-level access rules in the database enforce that a user can only read or modify their own records — not just at the UI layer.
• Uploaded documents live in a private storage bucket. There are no public URLs; each read is authorised per request.

Encryption

• All traffic between your browser and VisaReady is encrypted in transit using HTTPS/TLS.
• Data and files are encrypted at rest by our hosting and storage provider.

Uploads

• Accepted file types are limited (PDF, JPEG, PNG, WebP) and size-capped per document.
• File type is validated on upload; unsupported files are rejected.
• You can replace or delete any uploaded file at any time. Deletion removes the file from storage.

Email

• Transactional emails (reminders, account notices) are sent from our verified sender domain with SPF, DKIM, and DMARC enabled.
• We do not attach your documents to emails.

Data minimisation & retention

• We collect only the data needed to run your checklist and reminders.
• You can delete individual documents or your entire account; deletion is permanent.

Subprocessors

We use vetted providers for hosting, database, authentication, and email delivery. They process data on our instructions under written agreements. See our Privacy Policy for details.

Reporting a vulnerability

If you believe you have found a security issue, please contact us via the Contact page with details and steps to reproduce. Please do not publicly disclose the issue until we have had a chance to investigate.

Shared responsibility

We protect the platform; you are responsible for keeping your account credentials safe, using a strong password, and signing out on shared devices.