Security & compliance centre

Clear controls for documents that matter.

Review The File Workshop's file retention, encryption, South African data location, access controls, privacy commitments and POPIA alignment.

Retention and deletion

Original uploads and unsupported-layout review samples are automatically deleted after 24 hours. Generated files and extracted transaction data are automatically deleted after 3 days.

Encryption

Connections use HTTPS in transit. Production objects and application data use Google Cloud provider-managed encryption at rest.

Data location

The production document bucket and Firestore database are configured in Google Cloud region africa-south1 in Johannesburg, South Africa.

Access controls

Documents are held in private cloud storage. Short-lived signed links, authentication, job ownership checks and Google Cloud IAM restrict access.

POPIA alignment

Our short retention, stated purpose, access controls and contact channel are designed to support South African privacy principles. This is an operational disclosure, not a legal certification.