Security
Claim data handled with care at every step
Auto claims carry sensitive personal information. Here's how Complete iQ Inspect protects it, from the claimant's phone to your team's report and your integrations.
Platform
Protections built into every account
-
Tenant isolation
Every claim, photo, report and setting belongs to one organization, and requests are scoped to the signed-in user's organization.
-
Role-based access
Adjusters, supervisors and administrators see and change only what their role allows.
-
Audit trail
Key actions on requests, claims and dispatch are recorded with who did them and when.
-
Encryption
All traffic uses HTTPS, and our hosting and database providers encrypt stored data.
-
Verified, expiring links
Inspection links need an access code from the original message and expire on the schedule your organization sets.
-
Retention you control
Administrators set how long requests, photos, reports, audit logs and integration logs are kept, and cleanup jobs remove them on schedule.
For IT and integration teams
Details your security review will ask about
-
Scoped, hashed API keys
Keys belong to one organization, carry read or write scopes, and are stored only as a hash.
-
Signed webhooks
Every delivery is signed with HMAC-SHA256 and time-stamped so you can reject forgeries and replays.
-
Short-lived photo links
Photo downloads through the API use signed links that expire after about an hour.
-
Release before sharing
Reports are available through the API only after an administrator releases them.
-
Private claimant pages
Inspection pages are excluded from search engines and don't pass the link to other sites.
-
Hardened web apps
Strict content security policies and security headers protect the dashboard and the capture flow.
Security questions
Where is our data hosted?
Our services are hosted in the United States, on Render and Supabase with Cloudflare in front. Our privacy policy lists the service providers we use and what each one does.
Who can see a claimant's photos?
Signed-in users in your organization whose role allows it. Photos aren't public, and API access requires one of your organization's keys.
How is AI used on our photos?
Photos are analyzed by our AI provider, under contract, to check quality, read the VIN and note possible damage for your team. Findings are advisory and stay attached to the photo they came from.
Can we decide how long data is kept?
Yes. Administrators set retention windows for each kind of data in the dashboard, and you can choose to purge data automatically once it's exported.
Can we get our data out?
Yes. Reports download as PDFs and photo sets as ZIP files, and everything is available through the API.
How do we report a security issue?
Email support@completeiq.com with the details. Our security.txt file lists the same contact.
Security review
Need more detail for your review?
Tell us what your security or vendor-risk team needs, such as a questionnaire or details about a specific control, and we'll follow up.
Thanks, your message is on its way
We'll reply within one business day. Check your inbox for a confirmation.
See Complete iQ Inspect on your own vehicles
Book a demo and we'll walk through the capture experience, the report your team reviews and what a focused pilot would look like for you.