Last updated: July 2026
We collect only what's necessary to provide our service:
Your documents are encrypted at rest (AES-256) and in transit (TLS 1.3). We maintain strict access controls and hash-chained audit logs. Data is hosted in the United States, with some document processing performed on our servers in the European Union (Germany).
We rely on a small set of infrastructure providers to run the service: Supabase (database & storage), Vercel (hosting), Stripe (payments), Resend (email), Twilio (WhatsApp/SMS invites), Anthropic and Voyage AI (AI processing — contractually barred from training on your data), and Hetzner (document processing, EU). Email privacy@sifrsys.com for the full subprocessor list or a data processing agreement.
You can:
We use essential cookies for authentication and security. No tracking or advertising cookies.
Questions? Email us at privacy@sifrsys.com