Security isn’t a feature. It’s the foundation.
Law firms, banks and global enterprises trust Docium with their most sensitive documents. Here’s how we earn that trust every day.
Encryption everywhere
AES-256 encryption at rest, TLS 1.3 in transit, and optional customer-managed keys (BYOK) on Enterprise.
Identity & access
SAML SSO, SCIM provisioning, enforced MFA and granular role-based permissions down to the template level.
Data residency
Choose where your data lives: United States, European Union, United Kingdom or Australia.
Complete audit trail
Every view, edit, approval and signature is logged immutably and exportable to your SIEM.
Resilient infrastructure
Multi-zone redundancy, continuous backups, and a 99.99% uptime SLA for Enterprise customers.
Continuous testing
Annual third-party penetration tests, a public bug bounty program and 24/7 security monitoring.
Your data is never used to train AI models
Docium AI is built with privacy by design. Prompts and documents are processed in your selected region, are not retained by model providers, and are never used for training.
- AI features can be disabled per workspace or per template
- Zero data retention agreements with all model providers
- Full transparency logs of every AI interaction
Have a security questionnaire?
Our security team responds to questionnaires and due-diligence requests within 3 business days.