Security

Your job records,
locked down by design.

DocuJob runs on Google Cloud with private networking, private storage and least-privilege service accounts. Here's how we protect your data.

Encryption everywhere

TLS 1.2+ with a modern cipher policy and HSTS on every endpoint. Data is encrypted at rest by Google Cloud.

Private media storage

Photos, audio and reports sit in a private bucket. Apps receive short-lived signed links, never public URLs.

Least privilege

Each service runs under its own service account with only the permissions it needs. No shared credentials.

Role-based access

Permissions are checked by the API on every request, so a hidden button is never the only safeguard.

Hardened edge

A global Google load balancer terminates TLS; services only accept traffic that comes through it.

Isolated data tier

Postgres and Redis run on private networking with no public IP addresses.

Questions from your security team?

We're happy to walk through our architecture, data flows and retention in detail. Get in touch and mention security in your message.