For IT and counsel · Updated September 2026

Security & data handling

This page summarizes how RequestWell handles your agency's data. Forward it to whoever needs to sign off.

Where data lives

All data is stored in Amazon Web Services (US regions): DynamoDB for records, S3 for documents (private by default, server-side encrypted, versioned), CloudFront + TLS for all traffic.

Isolation

Every record is keyed by your agency's identity, and every clerk action is authorized against a live membership check — removals take effect immediately. Our automated test suite attacks every route across tenants and roles on every code change.

The activity history

Each request keeps an append-only, hash-chained activity history. Corrections are recorded as new entries; nothing is edited in place. Chain heads are anchored daily to write-once (Object Lock) storage, and each run verifies the live chains against the previous day's anchor.

Documents

Uploads are bound to a cryptographic checksum that Amazon S3 itself verifies — a tampered upload is rejected by the storage layer. Files with executable or active-markup content are refused. Delivery links expire in 7 days and can be revoked; downloads always serve the exact finalized version of a file.

What we never do

Interpret records law or set deadlines for you — your office configures the clocks, and the product shows its arithmetic.
Automatically delete your records. Retention settings are yours; deletion requires an explicit approval workflow.
Hold data hostage — full export is always available, including for past-due accounts.

Email

Notifications are sent via Amazon SES with SPF, DKIM, and DMARC configured. Requester-supplied text is sanitized against header injection.

Incident response

Confirmed incidents affecting your data are disclosed without undue delay. Contact: hello@requestwell.com.