Security and trust
How BailHub checks members and protects their data.
Who gets in is decided by a reviewer working from official Florida records. What members share is protected by the controls below, each described as it works today.
Verification
4 of 5 complete- Email confirmed
- License matched to DFS records
- Identity code sent to the DFS email of record
- Surety appointments verified
- Reviewer decision
Who gets in
A reviewer checks every applicant against Florida DFS records before any professional feature opens.
A person reviews every member
A reviewer checks each application against official Florida Department of Financial Services records. Software gathers the records; the reviewer makes the decision.
Licenses checked against DFS every morning
BailHub downloads the DFS bulk licensee and appointment files once a day, early each morning Eastern time. When a complete download no longer lists a member's license or any active appointment, the account is restricted until a reviewer looks again.
Surety appointments from DFS data
Insurer appointments come from DFS appointment data. An appointment a member types in stays a claim until DFS data or a reviewer confirms it.
Agency license checks
An agency's 24-05 license and its business appointments are checked against DFS data and recorded for the reviewer before the agency is verified.
Identity tied to the license
A one-time code goes to the email address on the member's DFS record, which the applicant cannot change. Without one, a reviewer compares a photo ID with the record.
How data is protected
Each control below is built into the product and running today.
Two-factor sign-in
Authenticator-app codes protect sign-in, each code is accepted once, and sensitive actions require two-factor to be on.
Re-authentication for confidential documents
Opening a confidential case document asks for a fresh two-factor code, and every opening is logged with who, what and when.
Encrypted secrets
Passwords are stored as Argon2 hashes. Two-factor secrets and confidential transfer details are encrypted with AES-256-GCM.
Every upload scanned for malware
Licenses, IDs, case documents and message attachments are scanned before anyone can open them. A file that has not been scanned is never served.
Agency data kept apart
Each agency's private records are isolated from every other agency's. To another agency, a record it may not see looks exactly like one that does not exist.
A full audit trail
Sensitive changes, staff decisions and security events are recorded with the person, the time and what changed.
Removed records stay removed
Records removed at the source are removed here too. Booking data is never stored as a copy, and we never charge to remove a booking photo.
No data sold
We do not sell personal information, and the site uses no advertising trackers.
Where each piece of information comes from.
License and appointment checks use the Florida Department of Financial Services bulk licensee and appointment files. Booking data is read from county jail records, through a data provider, when a member searches.
- Florida DFS
- License status, license type and insurer appointments for individuals and agencies, downloaded once a day.
- A reviewer
- Checks the official record, identity, appointments and any disciplinary orders before approving anyone.
- County jail records
- Bookings from Florida county jail records, delivered by a data provider, read on demand and never stored here as a copy.
- The member
- Profile details and documents for the reviewer. A typed-in appointment stays a claim until it is confirmed.
Report a concern
If you think an account has been misused, a profile is not who it says, or you have found a security problem, tell us. A member of staff reads every report.
Register with your DFS license number.
Registration takes a few minutes. A reviewer checks your license against official records before professional features open.