Plain answers · Updated September 2026
This page explains, in plain language, how RequestWell protects your agency's records. A detailed technical assurance document is available to agency IT and counsel on request at hello@requestwell.com.
The service runs in Amazon Web Services data centers in the United States. Records and documents are encrypted in transit and at rest. Documents are kept in private, versioned storage that is never publicly accessible.
Every clerk action is re-authorized on our servers against your agency's current member list before any record is touched — one agency can never see another's records, and a removed or disabled member loses access immediately. Requesters see only their own request, through a private link that your office can revoke or reissue at any time.
Actions the service records become permanent entries — the product has no way to edit or delete them, for us or for you. Corrections are added as new entries. Once a day, a seal of every file's history is written to write-once storage — locked against ordinary modification or deletion for its retention period (only privileged account-level access could bypass the lock, and such access is itself logged) — and the live record is automatically compared against the previous seal. A mismatch raises an alert and triggers a documented stop-and-investigate procedure. This provides tamper evidence: it is designed so that quiet edits cannot go unnoticed, not to claim that no failure could ever occur.
Uploads are integrity-checked end to end: the file a clerk selects is, byte for byte, the file the requester downloads, and a finalized document can never be silently replaced. Executable and web-active file types are refused. Delivery links expire after 7 days, one live link per document at a time; your office can list the links issued for a request and revoke any of them, and the request export lists them too.
Notifications are sent from requestwell.com addresses through a major cloud email provider. Requester email addresses are used only for messages about their own request.
Confirmed incidents affecting your data are disclosed without undue delay. Contact: hello@requestwell.com.