Built for files that shouldn't leak.
An independent medical examination file contains clinical records, a claimant's personal information, and an opinion that may end up in litigation. Assessco is architected on the assumption that every one of those is sensitive — isolated per organisation, accessible only to the people who need it, and traceable after the fact.
Five design decisions that matter most
Isolation by database, not by row
Each organisation's operational data lives in its own database, registered against a central tenant registry. There is no shared cases table where a filtering mistake could expose another organisation's files.
Identity handled by Keycloak
Authentication runs through Keycloak over OIDC with PKCE. Assessco never stores your password — accounts are keyed to a Keycloak identity.
Least privilege by default
Permissions are granular per module — referrals, cases, examiners, reports, billing, team, roles — and checked on the server for every action.
Documents never served directly
Uploads go to encrypted object storage. Files are read through short-lived pre-signed URLs generated per request.
Actions are recorded
Case actions and status changes are written to an audit trail, so who did what and when is answerable months later.
Access without accounts, safely
Claimants and referrers act through signed, expiring links rather than shared passwords. Scheduling links expire after 72 hours.
What each party can actually see
The most common source of a data incident in this industry is a report emailed to the wrong person. Assessco narrows what anybody can reach in the first place.
Scoped to their role, within one tenant
Team members see only the modules their role grants. Roles are built from individual permissions rather than fixed tiers.
Only cases assigned to them
An examiner's portal shows their own assignments, appointments, and reports — nothing about the rest of your caseload.
Only their own referrals
Insurers and law firms see the referrals they submitted, the resulting reports, and their own invoices.
Booking details only
A transport or interpretation vendor sees the appointment logistics they need and their own invoices — not the clinical file.
Their own appointment, nothing else
The scheduling link lets a claimant propose times and state service preferences. It expires after 72 hours.
Platform safeguards
| Area | How it works |
|---|---|
| Data in transit | All traffic served over TLS. Documents are transferred over signed HTTPS requests. |
| Data at rest | Documents are held in encrypted object storage. Databases run with encryption at rest enabled. |
| Tenant separation | Each organisation's operational data lives in its own database. Requests resolve the active tenant before any data access. |
| Authentication | Keycloak-backed OIDC with PKCE. Multi-workspace users select an active workspace scoped to the session. |
| Authorisation | Role and permission checks run server-side on every action, including server actions behind the interface. |
| Document access | Files are never served from a permanent public URL. Each read generates a short-lived pre-signed URL. |
| Report delivery | Reports reach referrers through their portal or a tokenised tracking page with password-protected downloads. |
| Link expiry | Claimant scheduling links are signed tokens that expire after 72 hours. |
| Audit trail | Case actions and status transitions are logged with the acting user and timestamp. |
| Payments | Subscription billing runs through Stripe. Card details are handled by Stripe and never stored by Assessco. |
Your data belongs to you
We don't use your data to train anything
Claimant records, reports, and case data are processed to operate the service for you. They are not sold, shared with other customers, or used to train models.
You're the controller
Assessco acts as a processor for the personal and health information in your workspace. You determine retention, who has access, and when records are removed.
Export on request
Reports and documents are downloadable at any time, and we'll provide a full export of your workspace data if you leave.
Security questions before you buy?
Send us your questionnaire. We'll complete it and walk your team through the architecture, including how tenant isolation and document access actually work.