How your documents are stored
- Every file is encrypted (AES with an integrity check) before it's written to disk. The encryption key is held separately from the files.
- Files are never public. Each download checks who is signed in and whether they're allowed to see that file.
- We only accept PDF, JPG and PNG files, and we check what each file really is, not just its name.
- Our servers and backups are hosted in London, UK.
Who can see what
- You and colleagues you invite. A colleague only gets access after accepting your invitation.
- The surveyor and staff on your case. Staff accounts need a second sign-in step from an authenticator app.
- Referral partners see the progress of your case only if you tick the box, and never your documents or figures.
- We sign in with one-time email links rather than passwords, so there is no password of yours for anyone to steal from us.
An audit trail for everything
We record every document view, every change to your case, every reminder we send and every professional sign-off, with the person and the time. If you ever want to know who did what, we can tell you.
Professional accountability
- Every Check, Challenge and appeal is reviewed and signed off by a qualified rating surveyor before it's submitted.
- We never use pressure, false deadlines or promises of a result, and we don't cold call.
Your rights
- Download a copy of everything we hold about your business from your account settings, at any time.
- Ask us to delete your data. We'll remove your documents and personal details within a month, keeping only what tax law requires (invoices, for six years).
- If you don't go ahead after a free check, we delete your documents after 12 months.
Full details are in our privacy notice.
Who we are
Stillrate is a trading name of Med Services Ltd, company number 14915054.
Reporting a security concern
If you think you've found a security problem, email hello@stillrate.co.uk with "Security" in the subject. We'll reply within two working days.