Source files are validated and encrypted before permanent object storage. Each document is authorized against its application user or server-controlled guest session.
Financial content, balances, tokens, object keys, and download URLs are excluded from application logs. Beta sources are deleted after processing and beta results expire within 24 hours. Staff have no document-access bypass.
No formal compliance certification or SLA is claimed.