No vague promises — this page describes the real infrastructure, encryption, and access controls behind every DokuDocs account.
No. Every account is a private, isolated vault. Access can only ever be granted to the specific people you designate, and every access attempt triggers an alert and a mandatory waiting period you can cancel.
Your documents are encrypted with AES-256 both in storage and in transit, so even in a worst-case breach scenario, stolen data is unreadable without the encryption keys. Our infrastructure is protected by a dedicated hardware firewall and continuous virus/malware monitoring.
Your documents are never stored or transmitted in a readable format outside of your own authenticated session.
Every document is encrypted at rest using AES-256, the same encryption standard used by banks and financial institutions to protect account data.
All connections to DokuDocs are encrypted end-to-end, so documents can never be intercepted or read while moving between your device and your vault.
Every account has its own numbered vault with no shared storage and no cross-account access. Your documents are never commingled with any other user's data.
The systems that hold your documents are protected the same way a bank branch protects its vault: layered, dedicated, and actively monitored.
Our infrastructure sits behind a Juniper SRX 300-L firewall — enterprise-grade network hardware that inspects and filters traffic before it ever reaches our servers, blocking unauthorized access attempts and known attack patterns at the network edge.
Our servers run continuous antivirus and malware scanning, so the systems storing your documents stay clean of the threats that most commonly lead to data compromise.
Every meaningful event on your account — sign-ins, access requests, document uploads, notification triggers — is written to a permanent system log, so there is always a clear, timestamped record of who did what and when.
Even with valid credentials, no one can walk into your vault unannounced.
Only the specific recipients you designate can request access to your vault — up to 1 on the Family plan, or up to 20 on Legacy. No one else has that ability, ever.
The moment access is requested, you're notified by email and text — before anything is released — so you always know the instant your account is touched.
A 4–5 day approval delay stands between any access request and actual document release, giving you time to review and deny the request if it wasn't you.
A note on transparency: we'd rather describe what's actually built than display badges we haven't earned. This page will be updated as our security program grows — including any third-party certifications, if and when we pursue and receive them.
DokuDocs