Your clients' data stays on your computer

The agent portal reports carry names, TFNs and ABNs, so the Client Health Check was built from the start to read them on your own computer and nowhere else. The only thing it can send is a short report summary you agree to share with Resolv. This page explains both, and how your IT team can check it.

The reports

What happens to the reports

The Client Health Check is a single page that runs inside your browser. The reports are read and analysed on your computer, and are never uploaded.
There are no accounts, logins or cookies, and nothing from the reports is kept once the tab is closed.
Anything you export, a CSV or a PDF, is saved only where you choose to save it.

Test it yourself

Open the Client Health Check, then disconnect from the internet: turn off wifi or unplug the cable.
Load your reports and run the review. It works exactly the same, because the analysis never needed the internet. The report summary simply is not sent.

What Resolv receives

A short report summary. Running a review sends Resolv your firm name, your email, the assessment date, how many clients were reviewed, how many companies and trusts sit in each tier, how many clients are getting worse since your last review, and how many individuals carry high personal debt. The page says this before you run it.
Whether we may contact you. Before a review runs, you answer whether you are happy for Resolv to contact you about the results. We only get in touch if you said yes, or if you ask us to later.
Nothing about any client. No client names, TFNs, ABNs, addresses or dollar figures are ever in the summary. You can see exactly what it contains on the page after a review runs.
If you ask us to get in touch, the same summary is sent again, marked as a request to contact you. We use your email to find a time to talk.
Introductions are yours to make. The Draft introduction link beside a flagged client opens an email in your own mail program, with Resolv copied. You decide whether to send it.
Which pages are opened. The site notes each page opened and when, with no cookies and nothing that identifies you, so Resolv can see how the tools are used.
Your confidentiality duty still applies. The Code of Professional Conduct requires a client's permission before you disclose their affairs to a third party (Tax Agent Services Act 2009, section 30-10, item 6). Introduce a director to us once they have agreed.

For your IT team

The browser enforces it, not a promise

The page carries a content security policy that allows at most one network connection: the report summary to Resolv's own address (connect-src). The browser blocks any other connection, and form-action 'none' blocks form submission.
Your IT team can confirm it in the browser's developer tools, on the Network tab: the only request the page can make is the summary, and its contents can be read there.
There are no external scripts, fonts, images or trackers. Every line of code is inline in the one file and can be read with View source. Report content is only ever written to the page as text, never interpreted as code.
To check the file is the one described here, save the Client Health Check page and compare its SHA-256 fingerprint with the one below. On Windows, open a command prompt in the folder and run certutil -hashfile portfolio_scan.html SHA256. On a Mac, shasum -a 256 portfolio_scan.html.
Fingerprint of the current version: 5d574dc2ea21956dd4c5f376c4bafb3677446c71966fd9735a994f08f21b818f
In this version the summary goes to https://app.resolv.au, and nowhere else.

Talk it through

Questions about how the data is handled? Ask us.

We'll walk you or your IT team through exactly what the page does, and what Resolv does and does not see.

resolv.au · hello@resolv.au · Resolv Advisory

Lock in a time to chat