Your data security and privacy are our top priorities. Learn about the comprehensive measures we take to protect your information.
We implement enterprise-grade security measures at every layer of our infrastructure, from data transmission to storage and processing. Your documents are processed securely and automatically deleted to ensure maximum privacy protection.
All uploaded documents are automatically deleted within 24 hours after processing. We maintain zero data retention policy for your content.
All data is encrypted using AES-256 encryption at rest and TLS 1.3 for data in transit. Database connections use SSL/TLS encryption.
AI processing through OpenRouter ensures your data is not stored or retained by any AI model providers.
Secure authentication powered by Clerk with multi-factor authentication support and enterprise SSO capabilities.
Granular permissions system with role-based access controls for different user types and admin functions.
Secure session handling with automatic timeout, secure cookie policies, and protection against session hijacking.
Hosted on enterprise-grade infrastructure with 24/7 monitoring, DDoS protection, and automatic security updates.
Firewalls, VPN access for admin functions, and network segmentation to isolate sensitive components.
PostgreSQL with encrypted connections, regular backups, and access logging for audit trails.
Cross-Site Request Forgery protection on all state-changing operations and API endpoints.
Advanced rate limiting to prevent abuse, DDoS attacks, and ensure fair usage across all users.
Comprehensive input validation and sanitization to prevent injection attacks and malicious content.
File Scanning: All uploads are scanned for malware and malicious content
Format Validation: Strict file type validation and size limits
Sandboxed Processing: Documents processed in isolated environments
Encrypted Storage: Temporary encrypted storage during processing
Isolated Workers: BullMQ workers run in secure, isolated containers
Memory Management: Secure memory handling with automatic cleanup
Access Logging: Comprehensive audit trails for all file operations
Automatic Cleanup: Guaranteed deletion within 24 hours
If you discover a security vulnerability, please report it responsibly:
Stay informed about security updates and practices:
Notifications: Security updates via email
Status Page: Real-time system status
Security Blog: Best practices and updates
We believe security is built on transparency. Our security practices are continuously audited and improved. We're committed to protecting your data with the same rigor we'd apply to our own.