Security & trust

Your clients’ work, protected by design.

Docsiv holds the documents you send to clients, so security isn’t a feature, it’s the foundation. Here’s how we protect your work, your brand, and your clients’ data.

TLSEncrypted in transit
RLSPer-client isolation
TLSDomain SSL when configured
Audit trailOn every signature

Encrypted in transit and at rest

Traffic is protected with TLS, and documents and data are encrypted at rest by the infrastructure providers. “End to end encrypted” is not a claim we make for every workflow.

Isolated at the database

Workspace and client access is enforced with Postgres Row-Level Security and application checks. Client-scoped views are designed to keep one client from seeing another, and should still be tested against your configuration.

Layered access model

Team members work in the dashboard, clients receive scoped portal access, and supported documents can use view, comment, or edit access with explicit scopes.

Domain SSL when configured

Agency workspaces can configure a verified custom domain with managed SSL. Pro uses a branded Docsiv subdomain, and the exact client-facing URL depends on the plan and setup.

Tamper-evident signing

The supported signing flow uses hashed tokens, OTP verification, an append-only audit trail, and a completion certificate for signed documents. Confirm the workflow and legal requirements for your use case.

Your data stays yours

You can export supported documents in the formats available for their editor, including PDF, PPTX, DOCX, CSV, PNG, and SVG where applicable. You own your content, and we do not sell it.

Compliance, honestly.

We’re a young company and we’d rather be straight about where we are. Here’s what’s in place today and what we’re building toward.

Available

DPA + privacy documentation

A Data Processing Agreement is available, and our subprocessors are listed publicly. Review the documents with counsel for your specific processing needs.

Available

Audit logging

Append-only audit events for signing, plus per-document activity and email logs.

In progress

SOC 2 Type II

We are building toward SOC 2 Type II as part of our path to enterprise readiness.

 Have a security question or need our security overview? Talk to us.

Security your clients can rely on.

Protection built into every document and portal you share.