How docveriq protects your documents

Sign-in and access

• Accounts are managed by Amazon Cognito. You must verify your email address before you can sign in, and password reset is handled on the sign-in page.
• Multi-factor authentication is not available at the moment.
• Every request is checked against your workspace membership and role: owner, editor or viewer.
• Invitations are tied to an email address and expire after seven days.

Storage

• Documents are stored in private, encrypted and versioned Amazon S3 storage in the AWS Asia Pacific (Sydney) region, ap-southeast-2.
• Workspace data is held in Amazon DynamoDB with encryption, point-in-time recovery and deletion protection.
• Downloads use short-lived links issued only after an access check. Page previews are rendered images served to signed-in members.

Malware scanning

Every upload is scanned with ClamAV before docveriq reads it. A file is only processed after a clean result for that exact version. A failed, timed-out or out-of-date scan blocks the file, and processing stops if virus definitions have not been refreshed for more than 48 hours.

Deletion

Workspace owners can delete individual documents or their whole account. Backups follow their own retention period, so deleting active data is not a certified erasure of every backup copy.

What we don't claim

docveriq has not been independently audited or certified against a security standard. The controls above are implemented, but if you need a formal assessment, ask before uploading sensitive documents, and use the fictional samples to evaluate the product.