How we keep your affairs private.
Alfred holds sensitive things — tax records, contracts, ID, legal matters. Here's exactly how they're protected, in plain terms.
Encrypted with a key that's yours
Every case gets its own encryption key. Your documents and correspondence are sealed with it using AES-256-GCM — the same standard banks and governments use — before anything is written to disk. That per-case key is itself wrapped by a master key held apart from the data. One case can never unlock another.
Delete means gone — not hidden
When you delete a case, we don't just flag it. We destroy its encryption key. Without the key, the sealed data is mathematically unrecoverable — even from a backup, even by us. That's the difference between archiving and erasing, and we do the second one.
Nothing is tampered with quietly
Every file carries a SHA-256 fingerprint taken at upload. When it's read back, the fingerprint is checked. If a single byte changed, the read fails rather than handing you a corrupted or altered document. And every ciphertext is bound to its own case and record, so nothing can be moved or swapped behind the scenes.
No passwords to steal
There are no passwords anywhere in Alfred — not even hashed ones. You sign in with a single-use link sent to your email. There's simply nothing for an attacker to breach, reuse, or leak. Sessions are held in a hardened, revocable cookie you can end at any time.
It lives in Europe
Your data is hosted in the EU, encrypted at rest and in transit. Email correspondence is authenticated (SPF, DKIM, DMARC) so nobody can forge a message onto your case, and every message shows whether its sender was verified.
Your money is held, not gambled
You pay a price you agreed into escrow. It's released to the professional only when the work is done and you approve it. No surprise invoices, and no funds change hands on trust alone.
And it's all optional
Using Alfred to hold your documents or handle your correspondence is a choice, not a requirement. Want to just find a vetted professional and take it from there? That's fine too. Whatever you do keep here, you can download in full and delete whenever you like — we keep nothing after that.
Security is never finished. If you find something or want detail on our setup, write to security@alfredproctor.com.