Enterprise-Grade Data Security
Your data security is our top priority. We implement industry-leading security measures to protect your documents and maintain your trust.
Security Features
Multiple layers of protection keep your data safe.
Secure transmission via TLS 1.3 (HTTPS)
Data is encrypted in transit using TLS 1.3. Encryption at rest is coming soon.
Data Retained for Account Lifetime
Documents and results are retained for the life of your account so you can review them, and deleted on account closure or request.
Compliance Ready
Security aligned with ISO 27001 principles
EU based infrastructure
Servers and AI providers are EU-based.
Office Add-in sandboxed execution environment
Docmaster runs inside the Microsoft Office Add-in sandbox and cannot access files outside the active spreadsheet.
Contractual data processing responsibility
Data processing is governed by a contractual agreement with SIA Docmaster.
Data Protection Commitment
At DocMaster, we understand that your documents contain sensitive and confidential information. Our commitment to data security goes beyond compliance.
We employ a defense-in-depth strategy with multiple layers of security controls. Every component of our infrastructure is designed with security as the primary consideration.
Our security team continuously monitors for threats, conducts regular assessments, and stays ahead of emerging security challenges to protect your data.
Your trust is our most valuable asset, and we work every day to earn and maintain it.
Security Practices
Comprehensive measures to ensure your data stays secure.
- Minimal data processing architecture
- Restricted administrative access
- Temporary in-memory processing only
- Infrastructure-level firewall protection
- Encrypted environment variables and secrets
- Two-factor authentication for all accounts
- Automated dependency updates
- Role-based access controls
DocMaster is now live and available to audit firms. We are currently onboarding firms in structured batches to ensure proper deployment and support.
Get in touch to request access, schedule a demonstration, or discuss firm-wide installation.
Related information
For how documents move through the product, see How it works. Retention periods and the controller/processor split are set out in the Privacy Policy and Terms of Service. Central deployment across a firm takes a few clicks and does not change how data security is handled. Questions about a specific engagement can go to our team.