We process passport data, government documents, and personal identity records. Security is not a feature — it is the foundation.
Passport data, travel document scans, and application information submitted by agents and travelers for visa processing.
Solely to process applications on behalf of agents and travelers. No data sold to third parties. No advertising profiling.
Kept while needed to deliver the service and support future applications. Deletion on request from the agency or traveler.
Each agency's data is visible only to that agency and the fulfillment partners it assigns. Support access to user accounts is logged and audited.
// Full detail is set out in our Data Security and Data Protection Policy, available on request.
Production runs on Google Cloud, separate from development and test environments, with a high-availability database and daily automated backups.
Applications and documents can be pinned to a specific region to meet government data-sovereignty rules.
Our platform endpoints accept HTTPS with TLS 1.2 or 1.3 only. Older protocols are refused, and HTTP Strict Transport Security is enforced.
The database and its backups are encrypted at rest. Passport scans and other documents are also encrypted with a Propellus-managed key that rotates every 90 days, in private storage that blocks public access.
Permissions are set per role and checked on the server on every request. Each agency sees only its own data, and fulfillment partners see only the orders assigned to them.
Account lockouts, permission and account changes, support sign-ins to user accounts, and actions on orders are recorded in an audit trail.
// certification badges (SOC 2, ISO 27001) are intentionally not displayed until those processes are confirmed in progress.
For procurement teams, government IT evaluators, and enterprise security reviews: we provide full security documentation on request. NDAs honoured. No information shared without written agreement.
Contact: security@propellus.co
