Security
How doclasso protects financial records and client details, from the moment a client taps their link.
Encryption
All traffic between clients, your firm and doclasso is encrypted with TLS. Stored files and the database are encrypted at rest.
How uploads travel
Files go straight from the client’s phone to a private bucket using short-lived signed URLs, then are copied to your Google Drive or Dropbox. If your storage is down we retry for 24 hours and warn you, and the file is never lost.
Client links, not passwords
Each contact’s link contains a long random token. We store only a hash of it, we rate limit attempts, and you can revoke or replace a link at any time.
Separation between firms
Row-level security is enforced on every table, so a firm can only ever see its own clients, files and messages.
Payments
Billing is handled entirely by Stripe. doclasso never sees or stores card numbers.