Skip to content
Sign inCreate account

Security

The measures protecting your documents and account.

Transport & storage

All transfers use TLS. Files are stored in isolated, per-task folders with unguessable identifiers, and download links are HMAC-signed so they cannot be enumerated or forged.

Authentication

Passwords are hashed with bcrypt and sessions use HTTP-only cookies. Password reset links expire after one hour.

Uploads

Uploads are validated by type, size and content signature before processing. Rate limiting protects the service from abuse, and plan quotas are enforced on the server, never just in the interface.

Retention

Automatic deletion is a core design constraint: an internal sweep removes expired outputs and orphaned uploads every few minutes. Deleting a file or your account takes effect immediately.