How secure is PresentDoc?
Overview
PresentDoc is built with security as a core principle. We protect your data through multiple layers: encryption, access control, monitoring, and secure infrastructure practices.
Encryption in transit and at rest
-
In transit: All traffic between clients and PresentDoc is protected with TLS.
-
At rest: Stored files and sensitive fields are encrypted using industry‑standard algorithms (such as AES‑256), reducing exposure if storage media is accessed without authorization.
Access controls
-
Role‑based access: Users can only access what their role allows.
-
Tenant isolation: Documents are scoped to a workspace, preventing cross‑tenant access.
-
Least privilege: Internal access is restricted to what’s required to operate the service.
Authentication & account protection
-
Password hashing using industry‑standard algorithms.
-
Email 2FA to add a second layer of security.
-
Rate limiting on login and verification flows to reduce abuse.
Auditability
Key actions (create, send, sign, download) are logged. This supports compliance and helps you review access or investigate incidents.
Infrastructure & operations
-
Secure hosting with restricted access.
-
Regular updates and vulnerability patching.
-
Backups stored securely with retention policies.
Data privacy
PresentDoc processes data only to provide the service. You control your data and can export or delete it based on your plan and retention settings.
Best practices for customers
-
Enable email 2FA.
-
Use strong, unique passwords.
-
Review user access regularly.
-
Remove users who no longer need access.