Security & Privacy

Your documents are your intellectual property. We built DocLumi with privacy-first principles from day one.

End-to-End Encryption

All documents are encrypted in transit (TLS 1.3) and at rest (AES-256). Your files are only decrypted during processing in memory.

Auto-Deletion

Uploaded files and processing results are automatically deleted after 24 hours. You can also manually delete documents at any time from your dashboard.

Infrastructure Security

Hosted on Vercel (SOC 2 Type II certified) and Supabase (SOC 2 Type II, GDPR compliant). Data processed in ap-southeast-1 (Singapore).

No Human Access

AI processing is fully automated. No DocLumi employee can view your documents. We do not use your data to train AI models.

Compliance

GDPR compliant. SOC 2 certification in progress. We do not sell, share, or monetize your data in any way.

Data Processing

Documents are processed using DeepSeek API with zero data retention. DeepSeek does not store or use your data for training.

Frequently Asked Questions

Do you store my documents?

We store documents for 24 hours to allow you to return and continue working. After 24 hours, all files are permanently deleted. You can delete documents manually at any time from your dashboard.

Do you use my data to train AI?

No. We never use your documents to train AI models. DeepSeek API also has zero data retention — your data is never stored or used for training.

Where is my data stored?

All data is stored on Supabase servers in Singapore (ap-southeast-1). Supabase is SOC 2 Type II certified and GDPR compliant.

Is my payment information safe?

We never see or store your payment details. All payments are processed through Stripe, which is PCI DSS Level 1 certified.

Have questions about security? Contact us at security@doclumi.com

← Back to DocLumi