Security & Trust
You're moving people.
We protect them.
Immigration means passports, family records, financial documents. We treat that data like the law requires — and like people deserve.
Defense in depth
Seven layers. No single point of failure.
Trust
Why this page exists
You're trusting us with the most sensitive documents in a person's life. This page exists because that trust should be explainable — not just asserted.
Case vault · Silva
At rest and in transit. Keys held separately.
- Encrypted
Passport scan
Identity
- Encrypted
Marriage certificate
Family
- Encrypted
Child birth certificate
Family
- Encrypted
Bank statement
Financial
- Encrypted
Background check
Legal
Defense in depth
Seven layers of protection
01
Physical security
Infrastructure hosted in certified data centres with physical access controls.
02
Network security
Encrypted in transit, firewalled, monitored.
03
Application security
Scoped access control, role-based permissions, audit trails.
04
Data encryption
Encrypted at rest and in transit.
05
Identity & access
Authentication, session management, least-privilege access.
06
Operational security
Incident response, backup and recovery, change management.
07
Compliance
GDPR-built from the start — not bolted on after the fact.
Scoped by design
Access control, applied to how you actually work
A partner, an associate, a paralegal, a client company, an applicant — each sees exactly the slice of the journey relevant to them. Internal notes stay internal. Client companies don't see each other's cases.
Same case. Three slices.
Marcus Silva · D7 · scoped by role
Partner
Carvalho & Associates
Matter notes, all docs, billing
Hidden: Other firms' cases
Company
GreenLeaf · Sam Chen
Their hire. Status. Next step.
Hidden: Internal notes · other clients
Applicant
Marcus Silva
Guided journey. Docs. Dates.
Hidden: Joya. Team thread. Other cases
Built in
Payments and AI, handled with the same care.
Payments on Stripe
Payment data flows through Stripe Connect Express — PCI-compliant, industry-standard. Talent Journey doesn't store card details.
BillingPayment path
Stripe Connect Express · PCI
AI and data handling
Joya operates on your case data within scoped access — not used to train public models. See Joya and Collaboration for how AI touches your cases.
Meet JoyaJoya
This case only · team only
- Public model trainingOff
- Applicant chatNever
- ActionsVisible. Reviewable.
The mark
The strongest shape
Provider
Your book
Company
Their people
Applicant
Their journey
Three sides — provider, company, applicant — each protected, each scoped, each holding the structure together.
FAQ
Access is role-based and scoped per relationship. A partner, an associate, a paralegal, a client-company user, and an applicant each see the slice that belongs to them — configurable per team. Internal notes stay internal. One client company never sees another client company's cases.