SECURITY OVERVIEW
Safeguards designed around private household records.
Long Pathways applies layered access, storage, billing and operational controls to protect household information while keeping authority and participation distinct.
Effective August 27, 2026 · Document version 2026-08-27.
Authentication and authorization
Secure workspaces require authenticated access. Every portal request checks active membership in the specific household, and sensitive actions require an authorized role. A link, subscription or family relationship alone does not grant access.
Recipient and message privacy
Coordinator and professional controls determine whether recipient directions are restricted or shared. Direct participant-to-coordinator messages are returned only to the sender and recipient and do not enter the household activity feed.
Address and fulfillment privacy
A signed-in participant’s mailing address is stored in the private account profile. It is copied into a shipping request only for that recipient, returned only to that recipient and authorized coordinator or professional, and never posted to the shared household activity feed.
Private files and image records
Uploads are limited by size and allowlisted type, validated from file content, renamed before private object storage and served only after a fresh household authorization check. Download responses disable caching and content-type sniffing.
Estate safeguards
Authority documents support human review before elevated Estate Mode access. Active action freezes prevent pathway changes, recipient assignments, final claim decisions and closeout progression until the freeze is released.
Billing safeguards
The one-time $495 Transition Assessment & Pathway Plan may be paid through Stripe-hosted checkout. Stripe processes the payment information; Long Pathways does not receive or store complete card or bank-account numbers on the public website. All larger Pathways are billed through a separate invoice emailed after the written scope and agreement are approved. Approved shipping charges and outside-provider costs follow their separately stated arrangements.
Operational controls
Administrative access is allowlisted, sensitive changes are recorded in an audit log, and production billing readiness is visible to the owner. Public forms and authenticated write operations apply origin checks to reduce cross-site request risk.
Continuity and incident response
Long Pathways maintains a restricted incident register, documented containment and notification-assessment workflow, recurring recovery and retention reviews, and export paths for permitted records. Access may be suspended when misuse or security risk is detected. Specialized legal, insurance, law-enforcement and infrastructure guidance remains with the appropriate outside professionals.
Responsible reporting
If you believe you found a security or privacy issue, do not access or alter another person’s data. Use the contact form, select a trust or privacy topic and include a safe description without sensitive household content.
Ongoing review
These controls reduce risk but no online service can promise absolute security. Long Pathways uses continuing accessibility evaluation, security testing and operational monitoring to improve its safeguards.