How we protect your files

This page describes what the product actually does today. It is written from the implementation, not from a marketing checklist, and it is updated when the behavior changes.

Private object storage

Uploaded files, conversion results, previews, and saved documents live in private storage buckets. There are no public buckets and no publicly listable paths. Storage keys are opaque identifiers; they never contain your filename or email address.

Authorization on every file request

Every request to view or download a file is checked against the session or account that owns it, on our servers, before any link is produced. Indexing directives and hidden URLs are not used as access control.

Access links are short-lived signed URLs valid for at most 60 seconds, and never longer than the remaining life of the file. A link that has already been issued stays valid until it expires; after that the request is checked again.

Uploads go straight to private storage

Your browser uploads directly to private storage using a one-time, size-capped upload link. The per-conversion limits on the Free plan are 25 MB in total, 10 files, and 100 PDF pages. Files that exceed the limits are rejected before processing starts.

Isolated processing

Conversion runs in a separate worker process that receives only job-scoped links to read its inputs and write its outputs. The worker does not hold storage or database credentials, so a malformed or hostile document cannot use it to reach other files or accounts. Files are processed on our servers; they are not processed in your browser.

Sign-in without a stored password

You sign in with Google or with a one-time code emailed to you. We do not store a password for your account. Codes expire quickly and are entered in the same browser tab that requested them.

Temporary and saved files

Unsaved results expire 24 hours after the upload session starts, whether or not you signed in or downloaded them. Signing in does not keep a file; only an explicit save copies it into your documents. Saved documents stay until you delete them. Trash keeps documents for 7 days before permanent removal.

Copies you have already downloaded are outside our control and cannot be recalled.

Deletion you can see

When you permanently delete a document, new access is revoked immediately and the file shows “Deleting…” until the physical removal has completed. We do not show “Deleted” while the underlying object can still be read.

What we don’t claim yet

No third-party security audit or penetration test has been completed yet.
We hold no security certifications. We do not describe the service as SOC 2, ISO 27001, or similarly certified.
We do not publish uptime percentages, geographic data-residency guarantees, or backup guarantees.
We do not use terms like “end-to-end encrypted” or “zero knowledge.” Files are processed on our servers, which means our systems can read them while doing the work you asked for.

When any of these change, this page will say so with the date.

Report a security issue

If you believe you have found a vulnerability, email support@docubox.io with enough detail to reproduce it. Please do not include other people’s documents in your report.