Security and trust
Security and accountability throughout the document lifecycle.
Isolation and access
- Every organization's data is separated at the tenant level.
- Role-based permissions govern viewing, editing, approving, signing and sharing.
- Administrative access is reviewed periodically.
Integrity
- Approved versions are immutable; changes create a new version.
- Every action is written to an append-only audit trail with chain verification.
- Quarantined documents cannot be signed or shared.
Sharing
- Data-room links can expire, require a password, and be revoked instantly.
- Visitor activity is recorded per link.
Governance
- Retention schedules and legal holds are enforced before disposition.
- Evidence is retained alongside the record.
- Backups support recovery objectives.
Certifications
DocEnva does not currently hold third-party certifications. We will publish verified reports here as independent assessments are completed.
Privacy
Customer documents are used only to deliver the service you configure. Our full privacy notice is available on request.
Accessibility
We design toward WCAG 2.2 AA. An independent accessibility assessment has not yet been completed.
Security disclosure
Found a vulnerability? Contact our team and we will respond promptly.
Contact security