Security

Hybrid post-quantum key exchange

Connections to the app use a hybrid key exchange that includes ML-KEM (NIST FIPS 203), when the browser supports it. Hybrid means two key exchange methods are combined.

This depends on the browser. When the browser does not support it, the connection falls back to the browser's other standard key exchange.

Files are encrypted at rest with AES-256

Files we store for you are encrypted at rest with AES-256.

Each customer's data is walled off in the database

Each customer's data is separated from other customers' data at the database level. The separation is set in the database itself.

We don't use your documents to train AI

We don't use your documents to train AI.

Deletion on request

Ask us to delete your data and we will. This page does not give a deletion time.

What we do not accept in the hosted product

We don't accept CUI, ITAR technical data or TSA SSI in the hosted product. Do not upload them.

What we don't claim

No certifications or audit reports are claimed yet. We don't claim that any system is unbreakable. The key exchange statement above is about the connection to the app and about nothing else. We make no claim about the security of your own devices beyond the statements above.