Security
Security, by design
Your files are encrypted, isolated and hosted in the European Union, then purged automatically. Here, concretely, is how we protect your data at every step.
Technology
End-to-end encryption
All data exchanged with our servers travels over TLS 1.2 or higher. Your files are encrypted at rest with AES-256 for the entire duration of processing.
Local processing when possible
OCR and transcription run directly in your browser: for these tools, your files never leave your device.
Processing isolation
Each conversion runs in a dedicated, short-lived environment, with no access to the other files being processed.
Automatic purge
Your files are deleted automatically: within 1 h on the free plan, 48 h on Premium, 7 days on Pro. Manual deletion is possible at any time.
Signed download links
Results are accessible via time-limited signed links, tied to your session. No file is public or indexed.
Secure API
API endpoints are protected by secret keys and authorization headers, revocable at any time from your dashboard.
Practices
Strict access control
Access to systems is restricted to authorized staff, with strong authentication and logging of sensitive operations.
Backup & recovery
Regular backups and a disaster recovery plan to guarantee service availability even in the event of an incident.
Secure development
Security is built into every stage of our development cycle, from design to deployment.
Incident response
A documented response plan allows us to act quickly in the event of an incident, and to inform you if your data is affected.
Built for the European regulation
EU hosting and processing, data minimization, access and deletion rights. The details are set out in our privacy policy.