Security

Sign-in is handled by Clerk, a dedicated authentication provider, so we never see or store your password. Two-factor authentication is available to every user. Each person has one role (Owner, Admin, Reviewer, Staff or Read-only) and sees only what that role allows. Staff and Read-only users never see SSN or EIN digits.

Every record belongs to one organization, and every request is checked against the signed-in user's organization. Automated tests confirm one organization cannot read another's data.

We accept only the last four digits of an SSN or EIN, never the full number. They are encrypted with AES-256-GCM before they are stored, always shown masked, and every view is recorded. The digits leave StayClearance only to PACER, over an encrypted connection, to confirm whether a bankruptcy case found under a name is the same debtor.

The site is served only over HTTPS, and browsers are told never to connect without it.

Every clearance check, matter view, review decision, export and identifier view is recorded with who did it, when, and from what IP address. No one in your organization can edit or delete these records.

A search that errors or times out is reported as an error, never as "no bankruptcy found." Only a search that includes PACER can mark a matter clear to proceed.

If you connect your firm's own PACER account, the login is encrypted, used only for your organization's searches, and never displayed back. If it stops working, the search fails rather than switching to our account.

Only names are sent to public court-record sources, never identifiers or other matter details.

Email admin@stayclearance.com.