Security and privacy by design

Insurance involves sensitive data. At Opencover, security and privacy aren’t a final step — they’re part of the platform’s design.

Scoped reads, controlled writes

Every table is protected and reads are scoped to the user’s operation. Writes don’t happen directly: they go through controlled server-side procedures that validate the operation before storing anything.

Links as capabilities

Public links — quote, self-service area, product entry — are capabilities: unguessable identifiers that reveal no internal ids and grant no access to other rows. Sharing a link never exposes the base.