Security & privacy

Private byconstruction,not by promise.

Your client's page carries their name, their family situation and their numbers. Here is exactly how it is handled.

Request a compliance reviewSee the platform
Access

Who can open a page.

Unguessable linksNo sequential identifiers, nothing enumerable, no public index. A page is reachable only by someone holding its link.
An access check they already knowLast four digits of their phone number, or their date of birth. No account to create, no password to lose — friction is how a follow-up dies unread.
Search engines are blockedEvery page is served with no-index directives and is excluded from crawling.
Expiry by defaultEvery page carries an expiry date you set. After it passes, the link stops resolving — a stale quote doesn't circulate indefinitely.
Revoke instantlyOne click pulls a page down. The link stops working immediately, on every device that has it.
Encrypted in transit and at restTLS on every request. Stored content encrypted at rest.
Data

What we hold, and for how long.

What you put in
The notes you submit, the figures you enter, and the recipient's name and access detail. Nothing more is required and we don't ask for account numbers, government identifiers, or medical records — if a workflow seems to want one, that's a design problem on our side.
What we generate
The draft text, the published page, your approval record with its timestamp, and open events. Approval records are retained for your files and exportable.
How long it's kept
Published pages live until they expire or you revoke them. After that, content is retained for 90 days so it can be restored on request, then deleted. Approval records are retained for the life of your account, because that's the part you may need later.
Deleting your account
Ask, and every page, draft and record is deleted within 30 days. We'll send you an export first if you want one.
Client communication
Room Two does not message your clients. We generate the page and a short note for you to send yourself, from your own phone or inbox. We hold no client phone numbers for messaging, operate no sending infrastructure on your behalf, and never appear in the middle of a conversation between you and the person you're advising.
Training
Your client content is never used to train models — not ours, not a vendor's. Where a third-party model is used to produce a draft, it runs under an agreement that prohibits training on submitted content and retention beyond the request.
Selling data
We don't, and there's no arrangement under which we would. There is no advertising business here to feed.
Tracking

What you get, and what you deliberately don't.

Your client is reading a document about their family at their kitchen table. That reality set the limits below.

What you do get
  • A notification on first open
  • View count and last viewed
  • Whether the access check passed
  • Pages used against your monthly allowance
What you don't get
  • No scroll depth or heat mapping
  • No time-on-section measurement
  • No device fingerprinting
  • No location or IP-derived geography
  • No visibility into who they forwarded it to
  • No third-party advertising or analytics scripts on a client page

The second list is a product decision, not a gap in the roadmap. A recap page works because it feels like a document from a professional, not a tracked marketing asset — and the moment a client senses the difference, the trust that makes the whole thing function is gone.

Regulated work

What Room Two will never do.

Invent a number.Figures come from you and appear exactly as entered.
Publish without you.No page goes live until you confirm the figures. The confirmation is logged.
Message your client.You send every link yourself, from your own number or inbox.
Predict an outcome.No page states or implies a likelihood of approval, performance, or result.
Remove a disclosure.Required language is not editable by any user, at any tier.
Recommend a product.The page explains what you presented. It doesn't choose or rank.
For your compliance officer

What to send them.

A real sample pageA complete document with the disclosure block intact — not a screenshot, not a marketing mock. It's the fastest way to get a yes or a specific objection.Open the sample →
The constraint listThe six things the product will never do, in writing, so a reviewer can check them against your firm's policy directly.See the platform →
A conversationIf your firm needs something specific — a retention term, an export format, a DPA — tell us before you subscribe rather than after.Get in touch →

Send it to compliance before you send us a dollar.

The sample page is complete, current, and yours to forward.

Open the sample page Request a review