TRYDOKU logo
TRYDOKU
Help Center Navigation
Account & Billing

Security, Privacy & Data Protection

Discover our TLS 1.2+ encryption standards, zero persistent payload retention guarantee, 24–48h ephemeral output file lifecycle, and GDPR compliance.

4 min read • Guide

Document automation often touches sensitive organizational data: employee contracts, financial statements, and customer agreements. Trydoku is engineered with a zero-trust, privacy-first architecture to protect your information at every stage of the document lifecycle.

Core Privacy & Security Commitments

Transit Encryption

TLS 1.2+ Standard

All HTTP traffic, file uploads, and API calls are strictly encrypted in transit using modern TLS 1.2+ protocols with strong cryptographic cipher suites and HSTS enforcement.

Spreadsheet Privacy

Zero Persistent Payload Retention

We enforce strict zero persistent payload retention. Uploaded spreadsheets, CSV rows, and variables sent via API are held in volatile memory only for the seconds needed to render documents, and are never written to long-term databases.

Ephemeral Output Lifecycle (24–48h)

Generated documents (ZIP archives containing your finalized Word or PDF documents) reside on secured storage with an automated 24–48h ephemeral retention window.

1
Immediate Download: Once batch generation completes, your ZIP file is ready for direct download.
2
Ephemeral Availability: Output files remain available for 24 to 48 hours in case your download was interrupted or a colleague needs the export.
3
Automated Pruning: Our background scheduled workers run continuous cleanup jobs to permanently shred and un-link files once the 24–48h retention threshold expires.

GDPR Compliance & Data Rights

Our primary production servers are hosted within certified European Union datacenters (Frankfurt, Germany). We fully respect your rights under the General Data Protection Regulation (GDPR) and global privacy laws:

  • Right of Access & Portability: Export your account metadata, template files, and purchase history at any time.
  • Right to Erasure (Be Forgotten): Self-service account deletion is available in your profile settings, permanently purging identity records from our database.
  • Data Processing Agreements: For enterprise and production users requiring formal contractual terms, we provide standard DPAs upon request.

Two-Factor Authentication (2FA)

Protect your team account with Time-Based One-Time Passwords (TOTP). Visit Security & 2FA Settings to link an authenticator app like Google Authenticator or 1Password.

Put this into practice

Ready to take action or test what you've learned?

Security & 2FA Settings →

More in Account & Billing

Signing In & Account Access 3 min read → Credits, Pricing & Invoices 4 min read →