Built to protect confidential work.
Security is built into the processing pipeline, not added as an afterthought.
Security architecture
Uploads are validated for file type and size, assigned non-guessable identifiers, and handled in temporary storage. Secure download links expire automatically. Our platform uses HTTPS/TLS, strict security headers, rate limiting, and hooks for malware scanning.
Data lifecycle
Uploaded → Queued → Processing → Ready → Downloaded → Auto deleted. We retain operational metadata such as job status and processing duration, never document contents, extracted text, or previews.
Responsible disclosure
Found a vulnerability? Please report it responsibly. We provide safe harbor for good-faith research and aim to acknowledge reports within two business days.
Read disclosure policy →