How DocAsker keeps client documents safe
Client documents are some of the most sensitive files a firm handles. DocAsker encrypts every file in transit and at rest, gives each client a private link you can expire or revoke, logs every upload, check and download, and lets you decide how long files are kept.
Encryption
Every connection to DocAsker uses TLS. Files and their metadata are encrypted at rest. Download links for your team are short-lived and signed.
Private links you control
Each request has its own unguessable link. A client only ever sees their own checklist. Set an expiry date on any link, or revoke it at once if it was sent to the wrong person.
Access inside your firm
Only people you invite can see your requests. On the Firm plan, permissions limit each colleague to the clients they work on.
A record of everything
Every upload, check result, download, deletion and setting change is logged with who did it and when. Export the log on the Firm plan.
Retention you decide
Choose how long files are kept after a request is complete, or delete a request and its files at any time. Deleted files are removed from our storage and backups on a fixed schedule.
How AI is used
Uploaded documents are processed only to run the checks for the request they belong to. We do not use your documents or your clients’ documents to train AI models.
Your obligations, made easier
Under data-protection laws such as the GDPR and Turkey’s KVKK, your firm is the controller of the documents you collect and DocAsker is your processor. We provide a data processing agreement on request and list our sub-processors in it.
Report a security issue
If you believe you have found a vulnerability, email us with the details. We will acknowledge your report within two business days and keep you updated until it is fixed. [email protected]
Frequently asked questions
Questions about security?
Tell us what your firm needs to check. We answer security questionnaires too.