Your data, protected at every step
Encryption everywhere, automatic deletion by default, audit trail by design.
Security architecture
Transit encryption
TLS 1.3 with HSTS preload. No legacy cipher fallback. Certificate pinning for the API endpoint.
Storage encryption
AES-256 encryption at rest for all uploaded PDFs, extracted data, and audit logs. Per-tenant key isolation in enterprise deployments.
Automatic deletion
Default 7-day retention for uploaded PDFs. Configurable down to immediate-on-completion. Hard-deletion (no soft-delete shadow), verifiable via deletion attestation.
Access control
Per-user audit log, role-based access in Team plans, SSO + IdP group mapping in on-premise. No service-account access by default.
Data lifecycle
What happens to a PDF you upload — from minute 1 to minute N.
- 1
Upload
TLS-encrypted upload, file hashed (SHA-256) on receipt, hash and timestamp persisted to the audit log.
- 2
Processing
PDF processed in an isolated worker with no internet egress. Extracted data validated; low-confidence cells flagged.
- 3
Delivery
Excel/CSV export delivered over TLS. Each cell carries source-trace metadata (page + bbox) for audit.
- 4
Deletion
PDF and intermediate artifacts deleted at the configured retention horizon. Deletion event recorded.
Technical details
Encryption details
- Transport: TLS 1.3 only; HSTS with 1-year max-age and preload
- Storage: AES-256-GCM with per-tenant master keys (KMS-managed)
- Backups: encrypted with separate keys, geo-restricted to single region
- Key rotation: master keys rotated annually; data keys rotated per session
Infrastructure security
- Worker isolation via container sandboxing; no internet egress from processing workers
- Network segmentation: public APIs in DMZ, processing in private subnet
- Quarterly penetration testing by an independent third party
- Continuous vulnerability scanning of container images
Application security
- All endpoints require authentication; no anonymous file submission
- CSRF tokens on every mutating action
- Rate limiting per user and per organization
- All exceptions logged without PII; audit log writes are append-only
Need stronger guarantees?
On-premise deployment
Data never leaves your network.
Validation pack
IQ/OQ/PQ documentation for regulated installs.
SSO integration
SAML 2.0 / OIDC, IdP group mapping.
Compliance reporting
Quarterly audit reports for your QA team.