Life-Change Playbooks

Our commitment

The series holds the details of a death in your family and the steps you are taking to settle it. We treat that as confidential by default: your work belongs to your account, and the only people who can reach it are you and the administrators who keep the service running.

How your information is protected

Protection is built into how the app handles data:

• In transit: everything travels over an encrypted connection (HTTPS/TLS). There is no plain-text path into or out of the app.
• At rest: data sits in access-controlled storage on managed infrastructure, encrypted at rest and isolated from other apps.
• Passwords: stored in a one-way form that cannot be read back, not even by us. If you lose it, you reset it; nobody can look it up.
• Access rules: every estate, task, note, and document row is tied to the account that created it, and the database refuses to return another account's records even if a request asks for them.
• Least privilege: our own administrators can reach stored data only for support and operations, and only through the managed platform rather than open access to the database.

The platform behind the app

The series is built and hosted on Base44, a managed application platform. Its safeguards sit underneath ours:

• Encryption: data is encrypted at rest and in transit. Stored data is not end-to-end encrypted, which means platform administrators can reach it when that is needed to run or support the service, under the limits described in our privacy policy.
• Certifications and testing: the platform holds SOC 2 Type II and ISO 27001 certifications, runs penetration tests regularly, and operates a bug bounty program.
• Infrastructure: the app runs on continuously monitored, private infrastructure rather than open servers, with no database, mail server, or file system of ours exposed to the internet.
• Credentials: app keys and integration credentials are encrypted at rest with a managed key service (AWS Key Management Service, on a platform-managed key). This app keeps its secrets out of the browser entirely: anything that needs a key runs on the server.
• Sign-in: authentication is handled by the platform's own service. Passwords are stored hashed, new accounts confirm their email with a one-time code, and access rules are enforced for the app's users. We never see or hold a password.
• Data access rules: the database itself enforces the rule that a record belongs to one account, so another account's records are refused at the source rather than hidden afterwards on the screen.
• Publishing checks: the platform scans an app's code and configuration for common problems, including overly open data, exposed credentials, and functions reachable without signing in, and can restrict where an app may be embedded and block browser access to the camera and location.
• Data protection: the platform states that it is GDPR compliant, and a data processing agreement is available on request. Ask us at admin@bnx-nextgen.com.

Your account

The front door is kept as tight as the rest:

• Email verification: a new account must confirm its email address before it can be used.
• Password resets: reset links are single-use, time-limited, and sent only to the address on the account.
• Sessions: signing in issues a session token that your browser holds; it ends when you sign out or the session expires.
• Choose a strong, unique password, and sign out on any device you share. Tell us at once if you think someone else has your password.

Payments

Card payments are taken by our payment provider on their own secured systems. We receive the confirmation, the last few digits, and the card type. We never see or store your full card number or its security code.

Service providers

A set of providers handles hosting, database and file storage, email delivery, and payments. Hosting, data storage, and account email come from Base44, the managed platform the series is built on, whose safeguards are described above. Each provider is bound to keep your information confidential, is given only the piece it needs to do its job, and is chosen with security in mind.

How we run the service

Day to day, the platform is maintained with these practices:

• Changes are reviewed and tested before they reach the live app, and the app is scanned for common web weaknesses.
• Software dependencies are updated to pick up security fixes, and unused capabilities are kept out of the app entirely.
• Activity and errors are logged so a problem can be spotted, and those logs record what happened rather than the content of your estates.
• Access to the app's own administrative tools is limited to the people who need it.

If something goes wrong

If we learn of a security incident that affects your information, we will investigate, contain it, and fix the cause. Where the law requires it, or where we judge that your information is at real risk, we will tell the affected account holders without unreasonable delay, and describe what happened and what to do.

Reporting a problem

If you spot something that looks wrong, whether a strange email claiming to be from us, a page behaving oddly, or a possible exposure of data, email admin@bnx-nextgen.com. Tell us what you saw and where, and we will look into it. Please give us a chance to fix it before sharing it more widely, and do not test for weaknesses in a way that reaches another person's account.

Availability and backups

The service runs on managed infrastructure with routine backups, and we aim to keep it available. No online service can promise uninterrupted access, and no system is perfect; keep your own copy of anything you cannot afford to lose, such as signed filings and the documents you gather.

Changes to this policy

If this policy changes, we will post the new version here with its effective date, and email account holders when the change is significant.