ApplySafely

Security, built in.

Six things the system cannot do, rather than six promises to behave.

Sealed on the phone, with a key made for that one link.
The phone encrypts the details before they leave it, using a fresh key pair made for the link. Only the public half travels; the private half cannot be exported from the agent’s browser.
The relay carries the envelope. It cannot open it.
The service in the middle holds one sealed envelope per link and no key, so there is nothing in it to read. The envelope is bound to its link, and the relay deletes it the moment the agent collects it.
One link, one use, thirty minutes.
A link accepts a single submission and the agent collects it exactly once, in one atomic step. Unused links expire after 30 minutes, and any other address on the relay answers with a plain not-found page.
Masked everywhere.
Numbers show as dots as they are typed, with an eye icon to reveal them on the client’s own screen. On the agent’s shared screen only the bank name and the last four digits appear.
Nothing else on the page.
No analytics, no third-party scripts, no fonts from elsewhere, no account and no app. A strict content policy forbids the page from talking to any other host, and everything travels over HTTPS.
No names, and nothing kept.
The link and the page carry no agent, client or company name. The client’s two confirmations are sealed inside the envelope for the record, and there is no dashboard or database of past submissions.

Nothing readable ever reaches a server.

256

bit AES-GCM encryption, keyed by elliptic-curve agreement in the browser.

use per link. Once the details are sent, the link is closed for good.

minutes, then an unused link expires on its own.

copies kept. The sealed envelope is wiped the moment it is collected.

Three steps. One minute.

Built for a live conversation, in person or on a screen share, where nobody should have to read a card number out loud.

1
Send the link
One tap creates a fresh link and a ready-to-send text. Or show the code on screen and let the client scan it.
2
The client fills it in
Bank draft or card, on their own phone, with the bank name found as they type and every number masked until they choose to show it.
3
It lands on your screen, sealed
The details arrive encrypted, open only on your computer, and flow straight into the application. The link closes behind them.

Questions clients ask.

Is anything charged when I send my details?

No. Nothing is charged or drafted through the link. The details go into your application, and the first premium is only collected on the date your coverage starts, if the application is approved.

Why did the link stop working?

Each link works once and closes 30 minutes after it was created. If you need to send details again, ask your agent for a new link.

Who can see my bank or card number?

The details are encrypted on your phone before they are sent. Only your agent's computer can open them, and they go straight into your application.

Why does the page not show my agent's name?

The page is deliberately plain, so that it carries nothing about you or your agent that could be read by anyone else. The link itself is the only thing that identifies your application.

Security, built in.

Sealed on the phone, with a key made for that one link.

The relay carries the envelope. It cannot open it.

One link, one use, thirty minutes.

Masked everywhere.

Nothing else on the page.

No names, and nothing kept.

Nothing readable ever reaches a server.

Three steps. One minute.

Send the link

The client fills it in

It lands on your screen, sealed

Made for the shared screen.

Questions clients ask.