Trust Center
How we protect your data, how the platform is built, and where we stand on compliance. Everything here is public. Where a control or certification does not exist yet, the page says so.
Last updated: 2026-09-18.
| Topic | What you will find |
|---|---|
| Data Handling | Where data is stored and processed in each Region (United States, Australia, European Union), encryption, retention, deletion, export |
| Security Overview | Architecture, tenant isolation, authentication, the grants model, logging, secure development, security testing, incident response |
| Privacy | Our two roles (processor for your documents, controller for your account), the Data Processing Agreement and Privacy Policy, frameworks we align to |
| Sub-processors | Every third party that touches customer data, by Region, with change notification |
| Compliance | Certification status, independent testing, documents available under NDA |
| Responsible Disclosure | How to report a vulnerability and what we commit to |
| Third-Party Notices | Open-source components we ship and their licences |
Legal documents
Published under /docs/legal/: the Privacy Policy (effective 21 September 2026), and the Terms of Service, Data Processing Agreement, Service Level Agreement and Support Policy (each effective 1 October 2026).
Contacts
| Security questions, questionnaires, vulnerability reports | security@docaifabric.com |
| Data protection and privacy requests | privacy@docaifabric.com |
| Contracts and legal | legal@docaifabric.com |