Privacy Policy
How Mortivo processes personal data in the CaseCheck service.
Who we are
Mortivo operates the Mortivo CaseCheck service. This policy explains how we process personal data in that service. Data-protection questions can be sent to privacy@mortivocasecheck.co.uk.
Personal data we process
- Account data — name, work email, role and firm.
- Case data uploaded by advisers — applicant identifiers, income, employment, address, deposit and property information.
- Documents uploaded to a case — payslips, bank statements, ID, proof of address and other supporting evidence.
- Extracted facts derived from those documents.
- Activity data — audit records of who did what, and when.
How documents and AI processing work
Uploaded documents are held in tenant-isolated storage. When a document is processed, its content is sent to an AI gateway for classification and extraction. During the controlled beta, CaseCheck operates on fictional data only; a tenant-level control prevents production data being used until it is explicitly enabled through a documented approval procedure. Customer documents are not used to train third-party models.
Lawful bases
We rely primarily on legitimate interests (for operating the service to authorised firms) and contract (for delivering the service to a firm we have contracted with). Where a firm relies on the client's consent to share documents with us, that consent is captured by the firm, not by Mortivo directly.
Retention
Case and document data is retained for the period the customer firm needs to meet its own regulatory record-keeping obligations. Retention rules are described in our internal Data Retention & Disposal policy and can be shared with customer firms on request.
Subprocessors
We use a small number of subprocessors to run the service (hosting, database, AI gateway). The current list and each processor's role is available on request from privacy@mortivocasecheck.co.uk. Material changes to subprocessors follow an internal change procedure.
International transfers
Where processing takes place outside the UK/EU (for example, particular AI providers routed through the AI gateway), we rely on appropriate safeguards for the transfer.
Your rights
Individuals whose personal data is processed in the service (typically clients of the customer firm) can exercise their rights — including access, rectification and erasure — via the firm that holds the customer relationship. Mortivo will support firms in responding to those requests.
Contact & complaints
Contact us at privacy@mortivocasecheck.co.uk. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
Changes
This policy will be updated as the service and our governance library mature. The date at the top of the page will be updated when material changes are made.