Live demo AI agents Features Use cases Security Pricing Sign in
Security

Your documents stay yours

Invoices, IDs and bank statements are sensitive. Here is exactly what happens to every file you send Docsift.

Your documentemail · upload · API TLS 1.2+encrypted in transit Encrypted storageAES-256 · US or EU AI extractionnever trains on it Your systemssigned webhooks auto-delete after 1–365 days Your documentemail · upload · API TLS 1.2+encrypted in transit Encrypted storageAES-256 · US or EU AI extractionnever trains on it Your systemssigned webhooks auto-delete after 1–365 days
Controls

Built-in, on every plan

Encrypted end to end

TLS 1.2+ in transit, AES-256 at rest. API keys hashed, never stored in plaintext.

Never used for training

Your documents are processed for your account only — never sold, shared or used to train models.

Retention you control

Auto-delete files after 1 to 365 days, or immediately after export.

US or EU data residency

Pick where documents are stored and processed. GDPR-ready DPA on request.

Roles & SSO

Invite your team with admin, editor and reviewer roles. SAML SSO on Enterprise.

Audit log

Every document, edit and export is logged and traceable.

Data handling

The details your security review will ask for

Need a DPA or a security questionnaire filled in? Email security@docsift.com.

Who processes my documents?
Cloudflare (hosting, storage and email intake), Google Cloud (OCR and AI extraction), Supabase (database and sign-in) and Stripe (billing). Each works under a data-processing agreement.
Is my data used to train AI models?
No. Documents are sent to AI providers under paid API terms that exclude training on your data, and we never use them to train our own models.
How long do you keep documents?
You choose: from immediately after export up to 365 days (unlimited on Scale). Deleted files are purged from storage and backups on a rolling schedule.
Where is data stored?
In the US by default. Scale and Enterprise workspaces can pin storage and processing to the EU.
Can I delete everything?
Yes. Delete single documents, whole inboxes or your entire workspace from Settings — or email us and we'll confirm deletion in writing.
Who at Docsift can see my documents?
Nobody by default. Support can view a document only when you grant temporary access from the dashboard, and every access is logged.

Your first 10 documents are on us.

Create a free account, forward one email, and watch the data land in your sheet. No credit card, no templates.