Anchorreclaim

What happens to the documents you send us

This page exists because the answer should be public rather than something you have to ask for. Every statement here is one you can hold us to, and the agreement you sign repeats them in binding form.

Start a review

The short answers

Who sees themThe auditor assigned to your file. Nobody else reads them, here or anywhere else.
SubcontractingNone. The analysis is not sent offshore, not passed to a partner firm, and not handed to a contractor.
How they reach usUploaded on this site over an encrypted connection, straight into private storage. Not by email attachment, and not through a third-party form we do not control.
How they are storedEncrypted at rest, in a private store with no public access, hosted in the United States.
How longThe duration of the engagement plus 24 months, then deleted. Earlier on your written request.
TrainingYour documents are never used to train any model, ours or anyone else’s.
Sale of dataNever. We do not sell or share your information, and we have no advertising business to sell it into.
Your own NDAIf your company requires its own mutual NDA instead of ours, send it and we will counter-sign it.

The agreement comes first, not afterwards

Nothing can be uploaded on this site until the authorization and confidentiality agreement has been signed. That is enforced by the system and not merely by the page you are on.

The order matters legally as well as practically. California’s privacy rules require a business to have a service provider under contract, with specific terms, before it hands over employment-related information. Massachusetts requires a business to select a provider capable of protecting personal information and to bind that provider contractually, and to encrypt personal information travelling across public networks. An arrangement that collects your documents first and sorts out the paperwork later asks you to breach your own obligations.

So the sequence is: three facts, then the agreement in full, then the documents. Your counsel can read the whole agreement before a single page leaves your side.

What we never ask for

This is the part worth reading twice, because it is also how you can tell a real request from an impersonation of one.

  1. 01Employee names and Social Security numbers

    A premium review works from payroll totals by classification code. Individual identities add nothing to the arithmetic, so we do not want them in our possession at all.

  2. 02Dates of birth and home addresses

    Same reason. Nothing we do requires identifying a person.

  3. 03Bank details or payment credentials

    Refunds and credits are issued by your carrier or vendor directly to you. We are never in the payment path, and we never need account access to receive our fee.

  4. 04Logins or system access

    No portal credentials, no accounting system access, no read-only user on your network. We work from documents you send.

  5. 05Anything urgent, by any other channel

    We will never contact you claiming a deadline that requires immediate payment or an immediate transfer of records. If something appearing to be from us does that, it is not from us.

If a document you are about to send contains employee names, redact them or send the summary page instead.

The arithmetic does not change. And in states such as Massachusetts, keeping names out of the exchange means no “personal information” arises in the first place — which is simpler for both of us than protecting it afterwards.

The infrastructure we use

Naming it is part of being checkable. This site runs on Vercel; documents and records are stored with Supabase in a United States region; our email, including the countersigned copy of your agreement, is sent through Resend; the written assistant on this site is powered by Anthropic’s Claude. Those are infrastructure providers, not people who read your file, and they process data only on our instructions. This is the list section 5 of the agreement refers to; if it ever changes, it changes here first.

One consequence is worth stating plainly: anything you type into the assistant is processed by that provider in order to answer you. So do not paste documents or personal data into it. It is there to explain how the work is done, and it will tell you the same thing if you ask.