Security and data handling

Plain-language summary for agencies.

• Hosting: Cloudflare Workers and Cloudflare D1 (US region). Calls through Twilio; email through Resend; agency billing through Dodo Payments (merchant of record). We never see card details.
• Encryption: HTTPS everywhere (HSTS); data encrypted at rest by the hosting provider.
• Accounts: passwordless sign-in links that work once and expire after 20 minutes; signed, HttpOnly session cookies; admin and staff roles.
• Tenant isolation: every query is scoped to your agency; automated tests check that one agency can never read another's data.
• Web protections: CSRF tokens on every form, strict Content-Security-Policy with no third-party scripts, input validation, rate limits on sign-in and enrollment.
• Webhooks: calls and payment events are accepted only with valid provider signatures.
• Minimal data: no medical fields; logs never contain full phone numbers or emails; family contact details are shared with your agency only for paid add-ons (billing) or when the family opts in.
• Consent records: wording version, time, IP and browser of the enrolling family member, plus the senior's keypress on the confirmation call, kept for audit.
• Export and deletion: admins can export the enrolled list as CSV at any time; deletion requests to support@keelcroft.com.

We are not a HIPAA covered entity and do not sign BAAs; please do not enter health information.