Security at EasyPBJ

Access belongs to your workspace

Clerk manages sign-in and sessions. Workspace membership and access roles control filing actions, with database access checks and private file storage. Finding a facility in the public CMS directory does not grant access to another team’s workspace. A job title in your profile does not grant permissions.

Your team confirms the filing

Import interpretations, required evidence, reviewer approval, and CMS result reconciliation remain separate steps. A downloaded XML file does not establish CMS acceptance. Your facility’s authorized submitter uploads the reviewed file in iQIES and checks the CMS result. Never share HARP passwords or sign-in codes.

Data and providers

Vercel hosts the app, Supabase stores private records and files, Clerk handles authentication, and Stripe processes payments. Optional AI assistance sends data only through the existing disclosed actions. Read the privacy policy for provider processing and retention details.

Keep resident information, Social Security numbers, bank details, and credentials out of uploads and support messages. Download your filing package for your own records. We do not advertise a recovery-time guarantee or an independently verified offsite-backup service.

Report a security concern

Email support@easypbj.app with the affected page and a short description. Do not include payroll records, credentials, or exploit access to another customer’s data. Our first-response target is one business day, Monday–Friday Eastern Time; resolution may take longer.

Contact

EasyPBJ is operated by King & Co. Consulting. Contact support@easypbj.app for account, billing, privacy, or support requests. Please do not email payroll files or credentials.