Loading…
Documents are sensitive by definition. We treat the workspace they live in the same way - encrypted, audited, isolated, and observable from minute one.
Verify every viewer
Magic-link or one-time-code email verification before a document ever opens.
Gate with passwords & NDAs
Password gates and click-through NDAs, enforced server-side on every request.
Lock to a place
IP and country allow-lists keep documents inside the networks you trust.
Set an expiry
Expiry windows and max-view counts retire access automatically.
Disable download & watermark
Block downloads, stamp dynamic watermarks, and deter screen capture.
Revoke in one click
Kill any link instantly. Access dies the moment you change your mind.
Encryption
AES-256-GCM at rest, TLS in transit. Secrets sealed with per-purpose keys.
Identity
Enforced MFA and hardware passkeys.
Infrastructure
Multi-AZ on AWS, RPO 5 minutes, RTO 1 hour, backups retained 35 days.
Audit logging
Every action, admin or user, written to an audit log, exportable via API.
Session security
Signed sessions with instant revocation - sign a user out everywhere in one move.