We always protect your data

Access to your inbox is revoked within five minutes after we’ve done a scan (which only takes about a minute) to find policy info. Unless you ask us to update your policy info we have no further access.

The only emails our service analyses during the one minute scan are those from companies that we’ve identified sell insurance policies. Absolutely none of those emails are kept on our systems after the scan is complete.

To be able to provide this service, we have to pass Google’s security assessment yearly. You can see what’s involved with that here: https://appdefensealliance.dev/casa

We also hold ISO27001: 2013 certification which requires Rightly to implement more than 100 technical and organisational controls. We’re audited every year by ISOQAR. Our certificate number is 20004 and you can see it here: https://www.alcumus.com/en-gb/certification/customer-area/certificate-checker/

At Rightly, our mission is to make sure that consumer data is handled right and that means taking our responsibilities as custodians of user data extremely seriously.

If you want to get more technical, there’s some further reading about how we keep your data safe below. Hopefully this list goes some way to reassuring you that we’re taking the kind of measures you’d trust to protect your data.

More detail in tech speak