Menu
Start your review

Trust center

Your security. Our commitment.

We take the protection of your information seriously.

In plain language

How we protect your information

Security, privacy and AI use, explained without legal jargon. Every full policy is available from the list above.

Security

Our security measures

Case files hold bank statements, identity documents and private correspondence. We treat every item as sensitive from day one.

Your information is encrypted while it travels between you and the portal and while it is stored. New accounts are activated with a one-time access code, and inside GCS only the people working on your case can open your file.

  • Encrypted in transit and in storage
  • One-time access codes for account activation
  • Access limited to your assigned case team

Privacy

How we handle your data

We collect only what we need to review and support your claim, and we tell you why we are asking for it before you send it.

We do not sell your personal information or use it for advertising. It is shared outside GCS only when your case needs it and you have agreed, or when the law requires it. You can ask to see, correct or delete what we hold.

  • We only ask for what your case needs
  • Never sold, never used for advertising
  • See, correct or delete your data on request

AI use

Responsible and transparent

The GCS AI Assistant and our document tools help organise information, such as reading a statement or spotting a missing document.

AI does not make decisions about your case. Every assessment is reviewed by a human specialist, anything AI-generated is clearly labelled, and you can ask to speak to a person instead, at any time and for any reason.

  • AI assists. People decide.
  • AI-generated content is always labelled
  • A human specialist is always available

For the technically minded: TLS 1.2/1.3 with HSTS and a strict Content Security Policy · documents encrypted at rest with AES-256-GCM · passwords hashed with Argon2id · HttpOnly, Secure, SameSite session cookies with idle and absolute timeouts · sign-in rate limiting and lockout · append-only audit log of staff actions · nightly encrypted backups kept for 14 days · firewalled, key-only servers.

Questions about your information?

Ask before you share anything. A specialist will explain what we need, why we need it and how it is protected.