Security and data protection

This page is dedicated to outlining our comprehensive measures and protocols designed to ensure the confidentiality, integrity, and safety of your files. Learn about the robust security practices we employ to protect your data.

Data Privacy and Security

Discover how we prioritize your privacy. Explore the summary of our approach to data handling in this section.

PDFCozy's Privacy Policy

Security Policy Overview

Ongoing Evaluation and Improvement

Product Security

Find details on how we secure and protect user data and document processing

Cloud infrastructure

PDFCozy's cloud infrastructure is bolstered by a leading data storage provider. It's important to emphasize that PDFCozy does not retain user documents.

Network communications

Data is sent and received using our cloud production servers, guaranteeing rapid access worldwide and robust security against online threats.

Storage

PDFCozy's cloud infrastructure is bolstered by a leading data storage provider. It's important to emphasize that PDFCozy does not retain user documents.

Data Encryption

Data encryption is a fundamental pillar of our product security. We implement robust encryption standards, including HTTPS (SSL/TLS) for secure data in transit and AES-256 authenticated encryption at rest for all temporary file processing and dashboard retention. This guarantees the confidentiality and integrity of your data, offering peace of mind when using our services.

Additionally, we employ end-to-end encryption to ensure the highest level of security for your data from the moment you upload it until it is processed and delivered back to you.

Data Retention and Removal

User Protection

Payment Information (Powered by Razorpay)

Internal Security

Discover the comprehensive measures and protocols implemented to secure PDFCozy's internal operations and data

Centralized Account Management

We employ a centralized account management system, streamlining the control and oversight of user accounts to enhance security.

Password Management System

We maintain the integrity and security of user login credentials through a robust password management system. We also implement password rotation, two-factor authentication changes every 90 days to reduce the risk of unauthorized access.

Secure Account Authentication

User accounts are protected with secure authentication via Google OAuth and bcrypt-hashed passwords. Session tokens are managed securely using industry-standard practices to prevent unauthorised access.

Controlled Physical Access

Implementing various measures such as alarms, fingerprint authentication, key generation, and anti-robbery safeguards to ensure stringent control over physical access to our facilities.

Employee Onboarding and Offboarding

Our onboarding and offboarding procedures include a checklist that prioritizes security best practices, ensuring that employees access aligns with our security standards.

Principle of Least Privilege

Access privileges are meticulously managed, adhering to the principle of least privilege. This means that users are granted only the minimum level of access required to perform their tasks, minimizing potential security risks.