Security and privacy

Compliance documents deserve careful access controls.

Checkmate is provided by WithCoverage and is designed to keep account data, public submissions, stored documents, and review decisions inside clear authorization boundaries.

Account-scoped access

Authenticated resources are loaded from the database and checked against account membership before protected data is returned.

Scoped submission links

A public submission token is limited to one counterparty and one project or building request. Submitters do not receive account access.

Protected document storage

Production uploads and document reads use time-limited signed storage URLs. Storage paths supplied by a caller are not treated as proof of access.

Human decision authority

Automated compliance findings remain advisory until an authorized person approves the submission or asks for changes.

Data handling

Checkmate processes uploaded documents to extract information and compare it with the requirements selected by the customer. The privacy policy explains the categories of information collected, service providers, retention, rights, and contact process.

Read the Privacy Policy

Report a security concern

Send the affected surface and a safe reproduction path directly to the WithCoverage team.

contact@withcoverage.com