PaperTight security
Document security & privacy
Your documents are your business. We build PaperTight so they stay yours — secure, private, and always available.
Security
PaperTight takes a security-by-design approach to protecting your documents. We keep investing in security controls so you can run your document control platform with confidence.
Security infrastructure
PaperTight runs on enterprise-grade cloud infrastructure on Cloudflare’s global network. Data is encrypted in transit with TLS and at rest, and production access is least-privilege by default — only the systems and people that need it can reach it.
Operational security
Access to production is limited and monitored. Every code change goes through review before it ships, dependencies are kept current with regular updates, and our infrastructure is continuously monitored for unusual activity.
Product security
Every workspace is an isolated tenant boundary. Role-based access separates workspace admins from staff, and client-portal scoping means clients only ever see their own company’s documents — never another company’s. Password controls apply across every account.
Privacy
Your documents belong to you and to your clients — not to us. We treat privacy as a promise: clear about what we do with your data, and careful with every part of it.
How we handle your data
Your files stay the source of truth — PaperTight adds control on top, it does not take ownership. We never sell your data. Staff access your workspace only to provide support, and only with your permission.
Data governance
You decide how long data lives. We honour deletion requests, support data export whenever you need it, and apply retention practices so nothing lingers longer than it should.
GDPR
Our handling of personal data is GDPR-aligned. We support EU data-subject rights — access, correction, deletion and portability — and a Data Processing Addendum is available on request.
Policies
We keep our commitments in plain language. Our Terms and Privacy Policy set out exactly how we collect, process and protect your information.
Our terms & privacy policy →How your documents are protected
We would rather show you exactly how your documents are protected than point at a badge. These are the concrete controls working on every file in your workspace — see them in context on the product tour.
Encryption everywhere
Documents are encrypted with TLS 1.2+ while moving between you and PaperTight, and with AES-256 while stored at rest. Your files are protected end to end of their journey.
Workspace isolation
Every workspace is a hard tenant boundary. One customer’s projects, companies, packages and documents are never visible to another — isolation is enforced at the data layer, not just the interface.
Full audit trail
The Activity Log records every upload, review decision and change, with who did what and when. Every document slot keeps its full version history, so nothing is ever quietly overwritten.
Backups & recovery
Your data is backed up automatically, and we test our restores so a backup is something we can actually rely on — not just a copy sitting untouched.
Reliability
Document control only works if it is there when you reach for it. PaperTight is built to stay up and stay fast, so your team and your clients can count on it every day.
High availability
PaperTight runs on redundant, globally distributed infrastructure so a single point of failure never takes your documents offline. A 99.9% uptime SLA is available on the enterprise tier.
Enterprise-grade infrastructure
Built on Cloudflare’s global network, PaperTight serves your workspace from close to wherever your team and clients work — fast, resilient, and ready to scale.
Access when it matters
Your documents are available from anywhere, whenever you need them. The client portal is included, so subcontractors and vendors can reach their own documents without waiting on your team.
Service status
A real-time status page is available to customers, so you always know PaperTight is up before you need it.
Ready for your security review?
Bring your IT and compliance questions — we’ll walk through everything.