TRUST SPEC · REV. 2026-Q1
Trust, in plain language.
No dark patterns. No selling data. Employers see anonymized counts — never the conversation, never who used what.
01 — WHAT YOUR EMPLOYER CAN'T SEE
- Your conversations with the concierge, a counselor, coach, or clinician.
- Who you are among the aggregate usage numbers.
- Which providers you booked with or what you discussed.
- Any legal drafts, money plans, or personal documents.
02 — WHAT YOUR EMPLOYER SEES
- Anonymized totals — e.g., 'X people got help this quarter'.
- Category buckets — e.g., 'therapy', 'legal', 'money' — never per-person.
- Time-to-help and completion trends, aggregated across the population.
Encryption
TLS 1.2+ in transit. AES-256 at rest. Keys rotated on a documented schedule.
SOC 2
Type II audit in progress; report available under NDA.
Data residency
US region. Vendor sub-processors listed and reviewed quarterly.
Retention
Conversations retained only as long as needed to complete the action, then purged on request.
Access controls
Role-scoped, single-tenant reads. Every request is logged.
Contact
security@useful.co · Responsible disclosure welcomed.