Security and document handling

Uploaded documents are protected by the App's storage and encryption controls. Authorised application functions decrypt content when it must be previewed, processed or downloaded. Anyone with administrative access to the server, database, encryption material or application identity must be appropriately authorised and controlled.

Use unique user accounts and minimum role permissions. Verify recipient addresses, never post signing links publicly and cancel a request immediately if a link or destination is compromised. Keep server keys and email credentials out of source code and plain-text application settings.

Downloaded or emailed completed documents are readable copies outside KNEWTE's controls. Protect them with suitable storage, access, backup, transfer and deletion procedures. Only upload personal or confidential information where your organisation has a lawful basis and appropriate safeguards.