Your documents are your most sensitive business assets. We treat security as a foundational requirement, not an afterthought. Every layer of our platform is built with industry-standard protections to keep your data safe.
All uploaded documents and stored data are encrypted using AES-256 encryption, the same standard used by financial institutions and governments worldwide. Encryption keys are managed securely and rotated regularly.
All data transferred between your browser and our servers is encrypted using TLS 1.3 protocol. This ensures that your documents and personal information cannot be intercepted during transmission.
We support strong password policies and optional two-factor authentication (2FA). Session tokens are secure and time-limited. Role-based access controls ensure that only authorized users can access specific features.
Our infrastructure undergoes continuous vulnerability scanning and periodic third-party penetration testing. We follow responsible disclosure practices and promptly patch identified issues.
Document data is backed up across multiple geographically distributed data centers. In the event of a failure, we can restore service with minimal data loss. Our RPO (Recovery Point Objective) is under 15 minutes.
Smart Files is designed to meet GDPR, CCPA, and SOC 2 requirements. We maintain data processing agreements (DPAs) with all sub-processors and can sign DPAs with enterprise customers upon request.
If you have discovered a potential security vulnerability in Smart Files, we encourage you to report it responsibly. Please email our security team directly at smartfiles01@gmail.com. We commit to acknowledging receipt within 24 hours and providing a detailed response within 72 hours. We operate a vulnerability disclosure program and will work with researchers to validate and remediate reported issues.