AES-256 Encryption
All documents are encrypted with AES-256, the same encryption standard used by banks and government agencies. Even our own engineers cannot read your files.
Two-Factor Authentication
Add an extra layer of security with TOTP-based 2FA. Works with Google Authenticator, Authy, and any standard authenticator app.
TLS 1.3 In Transit
All data transmitted between your device and our servers is encrypted with TLS 1.3, the latest and most secure transport layer protocol.
AWS Infrastructure
We run on AWS, which is SOC 2 Type II, ISO 27001, and GDPR compliant. Your data is stored in secure data centers with 24/7 monitoring.
Zero-Knowledge AI
AI processing happens in secure, isolated environments. We don't use your documents to train AI models. Your data is never shared with third parties.
Session Management
View all active sessions, see device and location info, and remotely log out any suspicious sessions from your security settings.
Our Security Practices
Regular Security Audits
We conduct quarterly security audits and annual penetration testing by independent security firms.
Secure Development
All code changes go through security review. We follow OWASP guidelines and practice defense in depth.
Employee Access Controls
Strict access controls ensure only essential personnel can access infrastructure. All access is logged and audited.
Incident Response
We have a documented incident response plan. In the unlikely event of a breach, we will notify affected users within 72 hours.
Backup & Recovery
Encrypted backups are maintained with 99.999999999% durability. Point-in-time recovery ensures your data is never lost.
What You Can Do
Enable Two-Factor Authentication
Go to Settings → Security → Enable 2FA. This prevents unauthorized access even if your password is compromised.
Use a Strong, Unique Password
Use a password manager and create a unique password for ConfiDoc. Minimum 12 characters with mixed case, numbers, and symbols.
Review Active Sessions
Periodically check Settings → Security → Active Sessions. Revoke any sessions you don't recognize.
Be Careful with Family Sharing
Only invite family members you trust. Review who has access to your vault regularly.
Responsible Disclosure
Found a security vulnerability? We appreciate responsible disclosure. Please report security issues to:
security@confidoc.lifeWe aim to respond within 24 hours and will work with you to understand and address the issue.