Nest.

Document vault

Encrypted storage for the paperwork side of the job.

Policy documents, signed applications, projections, and underwriting notes in one place, encrypted at rest with AES-256-GCM and scoped to your account. Tag, search, and export.

Get startedSee the platform

What lives in the vault

The documents a policy generates, kept together.

A single policy throws off a stack of paperwork. The vault holds it as one set, encrypted and anchored to the contact and policy it belongs to, instead of leaving it spread across inboxes and a local drive.

  • Records

    Policy paperwork, in one place.

    Policy documents, signed applications, illustrations, and underwriting notes live together instead of scattered across email threads and a desktop folder.

    • Policy documents and signed applications.
    • Illustrations and product disclosures.
    • Underwriting notes and correspondence.
  • Encryption

    AES-256-GCM at rest.

    Every vault file is encrypted at rest with AES-256-GCM before storage. Access is scoped to your account in application code.

    • AES-256-GCM encryption at rest.
    • Access scoped to your account in application code.
    • No aggregation across accounts.
  • Audit

    Selected actions are logged.

    An audit log records security-relevant actions such as document downloads and record changes. Documents anchor to the contact and policy they belong to, so the trail is always attached to the right record.

    • Audit log of downloads and changes.
    • Documents anchored to contact and policy.
    • CSV export while subscribed and for a limited period afterward.

Encryption

Encrypted before storage, scoped to your account.

Files are encrypted with AES-256-GCM before they are stored. Access is checked against your account in the application code on every request, not a setting you have to turn on.

  • AES-256-GCM encryption of vault files.
  • Access is checked against the owning account on every request.
  • No aggregation of records across customers.
  • The encryption and access model is documented on the security page.

Organize and find

Tags, search, and one-click export.

Documents anchor to the contact and policy they belong to, so a file is one click from the record it supports. Tag what you store, search by file name, contact or tag, and export when you want your records back.

  • Documents anchor to the contact and policy they belong to.
  • Tags and search by file name, contact or tag.
  • One-click export - your records stay yours.
  • Nest is software, not a data broker; it does not sell client information.

Audit trail

Downloads and changes are recorded.

The vault keeps an audit log of selected actions such as downloads and changes; not every read is logged. Because each document is anchored to a contact and policy, the trail reads against the record it belongs to instead of a loose file name floating in a folder.

  • An audit log records security-relevant actions such as document downloads and record changes.
  • Entries attach to the contact and policy the document belongs to.
  • The same access model applies to everything you store.

Encryption and data ownership

The short version, with the details on click.

Expand any line for the definition. The full security model is at /security and the terms are at /legal/disclosures.

Related

Where the vault fits in the platform.

FAQ

Common questions.

One platform. Your tools. Your data.

Solo from $69.99, Pro $129 - see pricing. Bring your own integrations and the accounts stay yours when you leave.

Get started

Bring your book across in one CSV pass.