Security

Your documents stay yours.

FileForge is built around one simple rule: do as little with your files as possible, and never anything you wouldn't expect.

Encrypted in transit

Every upload uses TLS 1.3. We never accept plaintext document uploads.

Browser-first processing

Whenever a tool can run client-side, it does. Your file never leaves your device.

Scoped storage

Cloud-routed files live in per-user prefixes. Storage policies enforce strict isolation.

Auto-delete

Free: 1 hour. Pro: 7 days. Business: custom retention windows you control.

Signed URLs

Downloads use short-lived signed links — no public file URLs anywhere on the platform.

Right to delete

Wipe your account, files and jobs at any time from your account settings.

A note on legal compliance

FileForge offers practical privacy controls and is built to be GDPR-ready. We don't currently advertise third-party certifications (SOC 2, ISO 27001, HIPAA). For regulated industries, please contact us so we can walk through your requirements before you trust us with sensitive documents.