Security

Your recordings often contain sensitive internal processes. Here's how we protect them - in plain language.

Data protection

• All traffic is encrypted in transit with TLS.
• Files are stored in Cloudflare R2 object storage; guides and screenshots are served via short-lived, signed URLs that expire in minutes.
• Your conversions are visible only to your account - there are no public listings of user content.

Account security

• Passwords are hashed with PBKDF2 (210k iterations) - never stored in plain text.
• Email confirmation is required before purchasing or converting.
• Password resets use single-use, expiring tokens.

Payments

All payment processing is handled by Stripe. Card details never touch our servers.

AI processing

Transcript and frame data sent to our AI provider is used only to generate your document, not to train models.

Your controls

You can delete any conversion - source video, frames, transcript and guide - from your account page at any time. Deletion removes the files from storage immediately.

Report a vulnerability

Found a security issue? Please report it responsibly to security@video2doc.app. We acknowledge reports within 48 hours.