Data Security & Encryption

Data encrypted at rest (AES-256)
Data encrypted in transit (TLS 1.2 / TLS 1.3)
All access over HTTPS
Encrypted credentials and secrets storage

Infrastructure & Hosting

Hosted on Amazon Web Services (AWS)
Uses AWS data centers with physical and environmental security controls
Regular infrastructure patching and security updates
Logical isolation between customer environments

Docsie leverages AWS services that maintain SOC 2 Type II-certified infrastructure.

Access Control

Role-based access control (RBAC)
Principle of least privilege
Secure authentication and session management
Optional SSO/SAML for enterprise customers
MFA supported where applicable

Data Protection & Backups

Automated backups
Secure storage and redundancy
Customer data isolated per tenant

AI & Data Processing

Data handling depends on the product selected. Free Community content may be used for shared-model training; paid customer content is not used to train shared models.

AI Providers Used

OpenAI

Anthropic

Jina AI

Mistral AI

Groq

AI Training and Product Tiers

Free Community: No email is required. The free conversion is provided in exchange for permission to use uploads and generated outputs to train, develop, evaluate, and improve shared Docsie AI models, including Dokuta.
Docsie Private: Paid customer content is processed privately and is not used to train shared models.
Docsie Enterprise: Paid customer content is not used to train shared models. Contractual data controls, deployment options, security commitments, and advanced Dokuta capabilities are available.
Paid customer content is not provided to third-party AI providers for shared-model training
Data Processing Addendum (DPA) available upon request

Data handling depends on the product selected. For full details, please review our Privacy Policy and Terms of Service.

Compliance & Privacy

GDPR compliant
CCPA compliant
Data Processing Addendum (DPA) available upon request
Privacy and data handling governed by customer agreements

Incident Response

Security monitoring in place
Incident response procedures defined
Customers notified of qualifying security incidents in accordance with applicable laws and contractual obligations

Vendor & Third-Party Management

Security considerations applied when selecting vendors
Limited access to customer data
Contractual security and confidentiality obligations

Docsie Security Overview

Trust Portal