Security and data handling
How we protect your files
Plain facts about where your documents go, who can see them and when they are deleted. No badges we haven’t earned.
Where your files go
- You or your agency send files through the client portal (HTTPS) or by email or an agreed link.
- The assigned team works on them, with need-to-know access and no third parties.
- Delivered back to you, with test results and a report.
- Deleted 90 days after delivery, or sooner on request.
- Free PDF checker: separate, runs in your browser, nothing uploaded.
Our commitments
In transit
The website and client portal are served over HTTPS. We do not make encryption claims beyond that.
Access
Files are available only to the people working on your project. We never contact your clients unless you ask us to.
Retention
Client files are deleted 90 days after delivery unless you ask us to keep them longer, or sooner if you ask.
Confidentiality
We sign your NDA on request and can refer to projects by a code instead of your client’s name.
No resale or training
Your files are used only to do the work: never sold, shared for marketing or used to train AI models.
If something goes wrong
If we learn that your files were accessed by someone who should not have seen them, we will tell you promptly and explain what happened.
Security questions
No. We do not hold a third-party security certification, and we say so plainly. If your organisation uses a vendor security questionnaire, send it to [email protected] and we will answer it honestly.
Yes. We sign NDAs on request before files are shared.
Yes. It runs entirely in your browser. The file is read on your device and never sent to us or anyone else.
Email [email protected] with the project name. We confirm by email when the files are deleted.
Last updated: November 3, 2026. See also our Privacy page and quality process.