Security & trust

Built to be worth your family's trust.

Trellis holds your parent's medical schedule, legal documents, and family finances. Here is exactly how we protect them — in plain English, provable inside the product.

THE ROLE LADDER

Five roles. Checked on the server, on every single request.

Access isn't a checkbox in the interface — it's enforced where it can't be bypassed. If a caregiver's session requests a financial document, the server refuses — no matter what any screen was showing.

Owner protection is built in too: a circle can never lose its last owner by accident.

VIEWERCalendar, journal, meds, and everyday care documents — read-only. No money, no legal or financial files.

CAREGIVER+ Log doses, complete tasks, write journal notes, add receipts. Never legal or financial documents.

FAMILY+ Expenses, documents, care profile — full participation in the family's business.

COORDINATOR+ Invite helpers, manage invitations, see member contact details.

OWNER+ Roles, billing, the audit log, full export, and permanent deletion.

AUDIT LOG — OWNER VIEW

document.downloadedPOA.pdf · Sarah H. · 09:12

medication.dose_correctedDonepezil · Grace O. · 20:22

membership.role_changedTom H. → viewer · Sarah H. · 21:03

expense.statement_exportedMarch 2026 · David H. · 21:10

circle.exportedfull circle · Sarah H. · 21:15

ACCOUNTABILITY

An audit trail your family owns

Every sensitive action — a document opened, a dose corrected, a role changed, a full export — is recorded and visible to the owner. Not our log about you; your family's log about its own circle.

Document downloads use 60-second signed links, so a shared file can't quietly circulate.

The protections, plainly

Two-factor authentication

Protect the account that protects everything else. Device and session management included.

Full export, one click

Every record, every file, the complete audit trail. Your data is portable by design, not by request form.

Verified deletion

Delete the circle and it's gone — an erasure we test table by table, automatically.

Read-only on lapse, never ransom

A missed payment makes the circle read-only. Care records are never deleted for non-payment.

Care content stays out of telemetry

Our logs carry IDs only. Your mother's journal never appears in an error report.

Records that can't lie

Dose logging is race-safe — one answer per slot — with a visible correction history. DST-proof scheduling, tested.

AI you turn on — not AI that watches

Trellis Intelligence stays off until the circle's owner enables it. What you choose to send — day summaries, captured notes, scanned photos, questions — goes to a zero-retention model API, is never used for training, and never enters our logs. Answers cite your own records, at your own role's visibility.

Trellis is a coordination and record-keeping tool. It is not a medical device, not telehealth, and not an emergency-response system — and it will never pretend to be. Our privacy policy and terms are written in plain English.

See it for yourself — as the caregiver.

The best demo of Trellis is noticing what a caregiver can't see. Start a circle, invite yourself in a second role, and check the audit log.

Start your circle free