What this notice covers
This notice describes the current My Disability Status website, firm application, client portal and support console. Your representing firm is responsible for its own client relationship and professional obligations. This software is independent of SSA.
Information collected
The public site collects the name, work email, organization, team size and message you submit. Private workspaces may contain client contact details, application information, medical and vocational records, messages, uploaded documents, case notes and account activity. Support tickets store their subject, category, replies, status and associated account. Do not put medical records or Social Security numbers in public forms or technical support tickets.
How information is used
Information is used to operate accounts, support case workflows, process requested document analysis, provide technical support, handle inquiries, maintain security and recover data. Platform administrators can manage account identities and view support content across firms. Normal firm and client access is limited by workspace, role and case permissions.
Service providers and AI processing
The public website is hosted on Netlify. Contact, demo and pricing request details are submitted to Netlify Forms for the website team to review; these requests are separate from private workspace records. The linked private application uses Solid workspace infrastructure and attachment storage. If model processing is enabled, selected case context and documents needed for that request are sent through OpenRouter to the configured model provider. Firm administrators must evaluate provider terms and required agreements before submitting sensitive information. New firms start with model processing disabled. Email, SMS, signing and other external connectors require separate configuration and have their own data practices.
Cookies, local storage and voice
Essential secure cookies maintain private sessions and workspace selection. Local storage saves appearance and navigation preferences. This build does not include advertising pixels or marketing analytics. Browser speech recognition is optional; depending on the browser, audio may be processed by the browser provider. Review its terms before dictating sensitive information.
Storage and retention
Application databases and stored originals are encrypted. Authorized services must decrypt information to process it. Existing workspace backups are encrypted and copied off the application host; coverage and restore status must be verified for each newly provisioned firm before production use. Firm settings can flag closed cases for retention review and preserve legal holds. There is no automatic record purge. Backup and workspace-service retention may differ from live records.
Requests and choices
Ask your firm about access, correction, copies or deletion of case information. For platform accounts or website inquiries, submit a privacy request through Contact or account support. Identity and authority may need verification. Some records may need to be preserved for applicable obligations or a legal hold. No response deadline or statutory eligibility is promised by this preview notice.
Security and changes
Encryption, access controls, malware scanning and audit history reduce risk; they do not guarantee that an incident cannot occur. This preview is not a certification of HIPAA, SOC 2 or any other compliance standard. Material changes to this notice will be dated and posted here. Additional firm agreements may apply.