Claims data, handled accordingly.
An inspection brings together personal data, photos of homes and vehicles, and insurers' contract information. We design PeritOS and Teleperitagens so that every piece of that data is protected, traceable and kept in the European Union.
In the European Union.
Data is hosted within the EU.
Encrypted in transit.
Every connection uses TLS.
Traceable.
Access and changes go into an audit log.
Minimal.
Each profile sees only what it needs to do its job.
Why inspection data deserves extra care.
A claim file is not just another customer record. It holds the policyholder's name, address and contact details, photos of the inside of a home or a vehicle's number plate, technical reports, policies and, in some lines of business, sensitive information about the people involved. It passes through many hands: the insurer, the loss-adjusting firm, the adjuster in the field, the supervisor who reviews the report.
Each of those hand-offs is a point where information can go missing, be copied where it shouldn't be or be seen by someone who doesn't need it. That is why, in PeritOS and Teleperitagens, security is not a layer added at the end: it is built into the way cases, profiles and files are designed from the start.
PeritOS
Hosting
A dedicated installation for each customer, with Hetzner in Germany or Finland (EU).
Backups
PeritOS database backed up every 15 minutes, with a recovery point objective (RPO) of 1 hour.
Access
Five base profiles (administrator, director, supervisor, adjuster and administrative), permissions checked on the server and an append-only audit log.
Files
Documents and photos are scanned for malware before they become available.
Authentication
Two-factor authentication, mandatory for administrators, directors and supervisors.
Teleperitagens
Real-time video
Cloudflare Calls (SFU). The policyholder joins from a link, with no app to install.
Storage
S3-compatible storage with Hetzner in Germany (EU). Files deleted after 90 days by default.
Connections
Encrypted in transit (TLS).
Integrity
SHA-256 hash on every photo, video and PDF, to prove the file has not been altered.
Sharing
Signed URLs that expire: a forwarded link stops working once its time is up.
Audit
Full audit trail per session.
Who sees what, and how it is recorded.
The principle is simple: each person accesses only what their role requires, and every access leaves a trace.
Role-based profiles
An adjuster sees the cases assigned to them; a supervisor, the reports they need to review; management, the KPIs. Nobody is given access “just in case”.
Client portal (optional)
When the firm enables it, each insurer sees the status, photos and reports of its own cases, and only those.
Audit log
It records who opened which case and when. The log is append-only: the application never edits or deletes it.
Two-factor authentication
Available in PeritOS and Teleperitagens. In PeritOS, it is mandatory for the profiles with the widest access.
We build it, and we run it.
The same team that builds PeritOS and Teleperitagens installs them, runs them and supports them, on working days. The backup policy and recovery objectives are agreed with each customer and set out in the proposal. Meet the team on our About page.
GDPR in a claims inspection: who is responsible for what.
The General Data Protection Regulation distinguishes two roles. The controller decides why and how personal data is processed: in a claims inspection, that is the loss-adjusting firm or the insurer. The processor handles the data on the controller's behalf and on its instructions.
CloudWorks acts as processor. That means the data in your cases is yours: we process it only to run the service. The relationship is set out in a data processing agreement (DPA), as Article 28 of the GDPR requires.
Data subjects, such as policyholders and third parties, have the right of access, rectification and erasure. The firm or insurer responds to those requests with support from CloudWorks.
GDPR
CloudWorks acts as processor; the loss-adjusting firm or insurer is the controller.
List of sub-processors available on request.
Data subject requests (access, rectification, erasure) supported, with help from CloudWorks.
What we send your security team.
Insurers assess their suppliers before trusting them with customer data, and the firms that work for them are assessed too. We make that assessment easier.
Technical documentation
Architecture, hosting and security measures for PeritOS and Teleperitagens.
Completed questionnaire
Answers to your vendor assessment questionnaire, in whatever format your team uses.
Security and GDPR questions
Where is case data hosted?
Within the European Union. PeritOS is installed separately for each customer, with Hetzner (Germany or Finland). Teleperitagens photos, videos and reports are stored with Hetzner in Germany. Teleperitagens real-time video passes through Cloudflare.
Is the data encrypted?
In transit, yes: information travels encrypted (TLS) between the app, the browser and the servers. In the adjuster app, the local copy used offline is also encrypted. Details of encryption in storage are in the security documentation.
Can we find out who looked at a case?
Yes. Access is recorded in an append-only audit log, which can be checked in the event of an audit or a complaint.
Who is the data controller?
The loss-adjusting firm or the insurer. CloudWorks is the processor and handles data only on your instructions, under a data processing agreement (DPA).
How do you show a photo has not been altered?
In Teleperitagens, every photo, video and PDF gets a SHA-256 hash when it is stored. Any later change to the file no longer matches that hash.
Have a security questionnaire? We'll answer it.
We send the technical documentation, the DPA and answers to your vendor assessment questionnaire. Direct email: info@cloudworks.pt (subject "Security")