Privacy

It stays in the European Union

The database, the files you upload and the servers that answer your requests are all in the European Union. Postgres and storage sit in one London project, and the application runs in the London region.

Nothing is copied to another region for analytics, support or backup.

What Suresby holds

The two adults and the children — names, dates of birth, where each adult lives, and the name, number, nationality and expiry printed on each passport, as you typed them or as Suresby read them off the photo you added.

Whether each of you has a will and a lasting power of attorney, and where the originals are kept.

The insurance you hold, by category and insurer, with the policy letter attached when you upload one.

Where every field came from — which of you typed it, and when.

What Suresby never holds

No account numbers and no policy numbers. There is no column for one anywhere in the database.

No medical detail, and no national identifier: no NHS number, no social security number, no personal number, nothing of the kind. No conditions, no medication, no allergies.

Nothing read off a document, except a passport, once, as you add it: the name, the number, the nationality, the date of birth and the expiry, for you to check before you save. Every other file is stored exactly as it arrived and opened only by you.

Who can see it

Both adults in a family see everything in that family. Nothing is hidden from one of you, and there is no way to let anybody outside the family in.

Suresby does not sell your information, does not give it to advertisers, and has no third-party access of any kind.

Who read, changed or exported what is written down for your family, and that record comes out in your export with everything else.

What the assistant is shown

Questions you ask go to Anthropic's API and are answered by Claude, along with the records the question needs. Nothing you send is used to train a model.

No file you upload is ever put in front of it. It is shown the fields you typed and nothing else, and it cannot write.

A zero-data-retention arrangement with Anthropic is not signed yet, so the assistant is marked beta until it is.

Taking it all away

One tap in settings downloads the lot — a JSON file with every record and where each field came from, every document you uploaded, and a description of the schema.

There is nothing to confirm. The schema is published, so a spreadsheet or another product can read it.

How it is kept

Your records are encrypted at rest and visible only to the two adults in your household. They are not end-to-end encrypted.

Ask us to remove your family and it is removed, files and all.

Asking us something

Write to privacy@suresby.com and a person answers.