Security first.
Your documents are sensitive. We built DocuStrata with security at its core, not as an afterthought.
Encryption
Your documents are protected with AES-256 encryption at rest and TLS 1.2+ encryption in transit.
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Encrypted database backups
- Secure key management
AI privacy
Two AI providers read your content, and each is bound by commercial API terms. Anthropic's Claude API transcribes scanned pages, classifies each document as it enters your library, and writes the cited answer when you ask a question. Voyage AI turns document passages and your questions into the embeddings that make search and question answering work. Neither uses your content to train models. Anthropic deletes the inputs and outputs within 30 days (retained only for abuse monitoring in the meantime). Each document is read once at import and again only when it forms part of an answer; nothing is read in the background for any other purpose.
- No training on your data, on any plan
- Anthropic and Voyage AI on commercial API terms
- Auto-deleted by Anthropic within 30 days
- Encrypted in transit (TLS 1.3)
Infrastructure
Built on enterprise-grade infrastructure trusted by Fortune 500 companies.
- US-based data centers
- SOC 2 Type II certified providers
- Vercel + Supabase + Anthropic + Voyage AI; email by Resend
- 99.9% infrastructure uptime
What we'll never do
Train AI on your data
Your documents stay yours.
Sell your information
We make money from subscriptions, not data.
Scan your content for ads
No profiling, no targeted ads. AI reads a document only when you ask it to.
Share your documents
Only the infrastructure providers needed to run the service. Never advertisers or data brokers.
Questions about security?
We're happy to answer any questions about how we protect your data.