Hosted-Data & Ephemeral Processing Policy

1. Core Commitment: No-Persistent-File Architecture

CommiCheck provides commission reconciliation for independent insurance agencies. We recognize that commission statements and agency management receivables contain sensitive agency financial records and Non-Public Personal Information (NPI) pertaining to policyholders.

For the hosted web evaluation and web application:

• Transient In-Memory Processing: Uploaded carrier statements and agency receivables CSV files are processed in volatile system memory (RAM) solely for the duration of the reconciliation calculation.
• Zero File Persistence: Uploaded CSV files, raw source records, customer names, policy numbers, and generated reconciliation evidence payloads are not intentionally written to disk, database tables, object storage (e.g., S3 buckets), temporary filesystems, or persistent data stores.
• Immediate Disposal: As soon as the reconciliation HTTP response is returned to the user's browser, the in-memory data structures are de-allocated and released.

2. Information We Retain (Metadata Only)

To provide multi-tenant access control, trial enforcement, and security, CommiCheck retains strictly limited metadata in our database:

• Account & Identity Metadata: User email address and unique Supabase authentication identifier.
• Tenant & Membership Data: Agency name, tenant UUID, and user role (owner, admin, member).
• Evaluation & Entitlement Status: Trial start timestamp, trial end timestamp (14 calendar days from first authorized run), and runs consumed (capped at three runs during evaluation).
• Aggregate Run Counters: Generated request UUID, row counts processed, and run type.
• Rate-Limiting Records: Request counters per tenant to prevent denial-of-service abuse.

At no point does our metadata database contain policy numbers, insured names, premiums, or commission dollar amounts.

3. Sub-Processors & Infrastructure

Sub-Processor	Role	Data Exposed
Vercel, Inc.	Serverless hosting & API execution	In-transit CSV payloads over TLS (ephemeral in RAM; zero disk storage)
Supabase, Inc.	Authentication & metadata control plane	Account credentials, tenant memberships, run counts (no CSV data)
Resend, Inc.	Transactional email delivery	User email address for authentication and invitation links

4. Agency Ownership & AI Policy

The agency retains all rights, title, and ownership in and to all uploaded data and resulting findings. CommiCheck does not sell, rent, monetize, or use agency commission data or policy records to train machine learning or artificial intelligence models.

5. Fully Offline Alternative

For agencies with strict compliance or carrier mandates prohibiting cloud processing, CommiCheck offers the Fully Offline Desktop Edition, which runs air-gapped on local agency hardware with zero internet transmission.