Platform Security & Compliance
Investment-migration files contain passports, financial records, and family details. The platform is engineered around that sensitivity from the data layer up.
Tenant isolation
Each agency operates in an isolated tenant. Isolation is enforced by PostgreSQL row-level security — the database itself refuses cross-tenant reads — not just by application-level checks. Deny-by-default access applies at the route, service, and database layers.
Encryption
- •At rest: case files are protected with per-tenant AES-256-GCM envelope encryption, so each agency's documents are encrypted under its own keys.
- •Field-level: passport numbers, tax IDs, and equivalent identifiers receive field-level encryption with blind indexing for search.
- •In transit: TLS on all connections; uploads pass through a malware-scan step before entering storage.
Audit & accountability
Every significant action writes to an append-only, hash-chained audit log — entries cannot be modified or deleted, and the chain can be verified. This produces an exportable trail for regulator, insurer, or internal review questions.
Consent is captured at lead intake, and partner firms see only the specific folders and files an agency user explicitly shares — scoped, revocable, and logged.
Authentication & access control
- •Multi-factor authentication (TOTP) and single sign-on support.
- •Role-based permissions across staff console, applicant portal, and partner portal — a partner advisor, a case manager, and an applicant each see a different, minimal surface.
- •Session management with token refresh and invite-based onboarding for staff, advisors, and applicants.
Certifications & procurement
We do not currently hold SOC 2 or ISO 27001 certification — certification work is on our roadmap, and we won't claim a badge we haven't earned. For procurement reviews, we're happy to walk your security or compliance team through the architecture and our data-processing terms on a demo call.
What the platform is not
Passport Nexus is software for authorised agents and immigration professionals. It does not file applications, does not hold government-authorised-agent status, and never appears as a submitter to any citizenship or immigration unit. See Licensing & Compliance.