Security
SupaPDF is built security-first. From encryption in transit to isolated processing environments, every layer of our platform is designed to keep your documents private, safe, and yours alone.
Security highlights
Secure your SupaPDF account with Multi-Factor Authentication. By requiring a second verification step, MFA ensures only authorized users can access your account, adding an extra layer of protection.
SupaPDF is pursuing SOC 2 Type 2 compliance to meet rigorous standards for handling sensitive data. Our commitment to security ensures your files are processed with the highest level of care and accountability.
For users handling sensitive information, SupaPDF supports HIPAA compliance. Contact us to sign a Business Associate Agreement (BAA) and process Protected Health Information (PHI) securely.
All your files are encrypted in transit with TLS and at rest with AES-256. Sensitive data, like API keys, is further secured at the application level for maximum protection.
We conduct regular penetration tests with experts and use advanced tools to scan for vulnerabilities, ensuring our platform stays secure against emerging threats.
Our platform is shielded from DDoS attacks with Cloudflare at the CDN level and fail2ban to block brute force attempts, keeping your workflows uninterrupted.
Commitment
At SupaPDF, we prioritize the safety and privacy of your data. Our platform is built with a robust security program that combines cutting-edge technical measures and strict organizational policies. Inspired by industry leaders, we've crafted a secure environment to ensure your files are protected every step of the way.
Standards
SupaPDF adheres to high security standards, drawing inspiration from ISO 27001 principles. While we are working toward formal certification, our systems are designed to meet international benchmarks for data security, availability, and confidentiality. We partner with trusted cloud providers like AWS, whose data centers are ISO 27001 certified.
Isolation
Your files are yours alone. Our infrastructure is designed with data isolation at its core - each file processing job runs in a separate, secure container. This ensures that even our team cannot access your files. For support cases, we'll ask you to manually share files, keeping your data private and secure.
File handling
We don't store your files longer than necessary. Once processing is complete, files are deleted immediately from our systems. SupaPDF is built for document tools, not storage, so your data doesn't linger. You can also integrate with trusted storage services like Amazon S3 or Google Drive for seamless workflows.
Transfers
All file uploads and downloads are protected with SSL/TLS encryption, using modern, secure ciphers. Our network is safeguarded by firewalls and actively monitored to prevent unauthorized access. Whether you're processing a single file or running a batch job, your data travels securely.
Infrastructure
SupaPDF is built to handle high demand without compromising performance. Our cloud-based platform automatically scales to manage load peaks, ensuring smooth processing even during busy times. Resources are isolated to prevent one user's activity from impacting others, delivering consistent reliability.
Access control
We take access seriously. Our web interface uses strong authentication with optional two-factor authentication (2FA) to secure your account. API access follows OAuth 2.0 standards, allowing you to set granular permissions. All actions are logged, and you can review detailed activity reports for full transparency.
Development
Our team follows industry best practices to keep our platform secure. Regular code reviews, vulnerability scans, and penetration testing ensure our software stays robust. We continuously update our infrastructure to address emerging threats, so you can work with confidence.
Availability
Downtime isn't in our vocabulary. Our infrastructure is fully redundant, spread across multiple availability zones to ensure uninterrupted service. Even during unexpected spikes or outages, SupaPDF keeps your workflows running smoothly.
Privacy
As a privacy-first platform, SupaPDF is committed to complying with the General Data Protection Regulation (GDPR). Your data is handled with care, and we're happy to provide a Data Processing Agreement (DPA) upon request. Check out our Privacy Policy for more details on how we protect your information.
Why trust SupaPDF?
SupaPDF combines speed, simplicity, and security to deliver a document experience you can trust. Whether you're processing a single file or automating workflows at scale, we've got your back. Questions? Our team is here anytime.
