Security

Effective October 29, 2026

Your documents are often private: contracts, ID cards, bank statements, exam papers. This page explains how DociKit protects them while we work on them, and what happens to them afterwards.

Encrypted connection

Every upload and download goes over HTTPS (TLS), so nobody between you and our servers can read your files.

Automatic deletion

• Uploaded files and results are deleted automatically 1 hour after upload.
• Click "Delete my files now" after downloading to delete them straight away.
• Your files are never included in backups. Backups hold only account details and are kept for 14 days.

Private processing

• Each upload gets its own random, unguessable ID and its own folder. Other users can't see or reach your files.
• Files are processed automatically by software. Our staff do not open them unless you ask us for help with a specific file.
• Our servers are firewalled and only the website is reachable from the internet.

AI tools

When you use an AI tool such as Chat with PDF or Summarize PDF, the text of your document is sent to our AI provider only to produce your answer. We never use your files to train AI models, and our provider does not use them for training either.

Accounts and passwords

• Passwords are stored only as Argon2 hashes, never in plain text.
• Your login cookie can't be read by scripts on the page (HttpOnly) and is sent only over HTTPS.
• Protect PDF uses AES-256 encryption. We don't keep the password you choose.

Report a security problem

If you think you've found a security issue, please email connect@docikit.com with the details. We'll reply quickly and fix confirmed problems as a priority.

Questions? Email connect@docikit.com.