Security & client confidentiality

Written for attorneys and accredited representatives evaluating CitizenPass Pro. If your question isn’t answered here, email support@citizenpassusa.com and you’ll get a direct answer from the person who built it.

What we never collect

• A-Numbers. Not optional, not encrypted, not anywhere. The system has no field for them.
• Documents. No uploads. No passports, certificates, or correspondence.
• Client names — unless you choose to type one. Matter labels are free text; most firms use an internal reference such as “Matter 2291 – Newark”. The system works identically either way.
• Card numbers. Payments run through Stripe; card data never reaches our servers.

What we do store, and how

For each matter you track: your label, the field office, the filing date, an optional receipt number, and the status text USCIS returns.

Receipt numbers are encrypted with AES-256-GCM before they are written to the database. The encryption key is held as a server environment variable and is never stored alongside the data. Only the last four characters are ever displayed back, in your dashboard or anywhere else. Deleting a matter destroys the encrypted value permanently — there is no archive copy and no way for us to recover it.

Isolation between firms

Two mechanisms, not one. At the database level, row-level security is enabled on every table holding client matters, with no public read policies at all — those tables cannot be reached from a browser under any circumstances, only by our server. Above that, every request is authenticated and returns only rows belonging to that account.

So if two firms both use CitizenPass, their matters sit in the same database and neither can reach the other’s rows — not by altering a URL, not by modifying a request.

Access

Sign-in is by one-time email link. We store no passwords, so there is no password database to breach and nothing to reuse elsewhere. Access to your matters follows your email account, so that account’s security is worth protecting accordingly.

Two people at CitizenPass can access production infrastructure. We do not browse customer data, and we access individual records only when you ask us to investigate something.

Where the data lives

Application hosting on Vercel, database on Supabase (managed PostgreSQL), both in the United States. Transactional email through Resend. Payments through Stripe. Domain and inbound mail through Cloudflare. These are our only subprocessors; the current list is kept in our privacy policy.

Our AI providers never receive client data. Anthropic and Perplexity generate the weekly brief from published government information and public reporting. Your matters, your labels, your clients’ receipt numbers and your email address are never sent to them, and no customer data is used to train any model.

Export and deletion

Export your full matter list to CSV at any time from the dashboard — no request, no waiting period. If you cancel, that export stays available for 30 days.

Email us and we will delete your account, your matters and your email address, and confirm when it is done. Aggregate statistics that contain no link to you or your clients remain.

If something goes wrong

If we become aware of a breach affecting your data, we will tell you directly and promptly, with what we know and what we are doing about it — not a notice buried on a status page. We would rather tell you early with incomplete information than late with a polished statement.

What we are not

CitizenPass is a small company. We do not hold SOC 2, ISO 27001, or HIPAA certification, and we will not imply otherwise. If your firm’s policy requires a certified vendor, we are not the right fit today, and we would rather say so than waste your time.

We are also not a case management system and not a law firm. CitizenPass reports published USCIS processing data and status information. It does not file, manage, or advise on any matter, and your professional obligations to your clients remain entirely your own.

Questions

support@citizenpassusa.com — including security questionnaires. We answer them.

Last updated: September 12, 2026 · Indigo Biosolutions LLC d/b/a CitizenPass · 175 Strafford Avenue, Suite One, Wayne, PA 19087, USA