Process
Verification, transparency, and the PII wall.
Two paths into the ledger. One standard for what publishes.
Verified shop path
- 01Shop registers and creates a profile.
- 02Admin reviews business identity (registration, license, address).
- 03Once verified, the shop publishes bills directly to its public record.
- 04Future bills auto-approve. Random audits continue.
Public submission path
- 01Anyone uploads a bill. Email confirmed.
- 02Submission queues for admin review.
- 03Reviewer scrubs customer PII server-side.
- 04Approved record appears against the shop / insurer.
The PII wall
Customer name, address, phone, email, VIN, license plate, claim number, and policy number live in an isolated table protected by row-level security. They are accessible only to admins and the shop that uploaded the document. They are never returned to anonymous queries — not via the API, not via export, not via inspection of the public ledger.
Never publicly visible
No public endpoint returns PII columns.
Server-side only
Storage bucket is private. Originals require admin signing.
Auditable access
Every read is governed by a database policy.