Four situations, one product.

How her information is protected

• She owns it. U Navigate is not the state's system of record. Her account is hers. Nothing about her is shared with a caseworker or anyone else unless she chooses to share it.
• The record can't be rewritten. Her Journey Record is append-only. Entries can be added. They cannot be edited or deleted after the fact, by her or by us.
• Every row is locked to her. Database access is enforced row by row. A request for her data returns her data only, even if our own code has a bug.
• What the AI is given, exactly. Lexi knows her first name and her state, so she doesn't have to repeat herself. Her last name, email, phone number, address, date of birth and account identifier are never sent to any AI provider from her account, and an automated test fails our build if that changes. A document she chooses to upload is different, and the next line says how.
• When she uploads a document, the AI reads it. That's how Lexi summarizes a lease or finds a deadline on a form. The document is hers, the summary is hers, and neither is used to train anything.
• No ads. No data sales. Ever.
• What isn't done yet. We don't yet have a Business Associate Agreement or a zero-data-retention commitment from our AI provider. Until we do, we tell agencies that plainly and don't accept HIPAA-covered data.