Trust

Security at Docly

Last updated: July 1, 2026

Your documents can hold sensitive information — contracts, financials, personal records. We built Docly's storage and infrastructure around keeping that information encrypted, isolated to your account, and never used for anything beyond answering your questions.

Encrypted in transit

Every connection to Docly — uploads, questions, answers — travels over encrypted HTTPS/TLS.

Encrypted at rest

Your stored documents are encrypted in our database — not sitting there in plain text.

Private by design

Access controls ensure your documents are visible only to your account — never to other users.

Never used for AI training

Your content is processed to answer your questions — not retained to train any AI model.

Infrastructure

Docly is built on established, security-audited infrastructure providers rather than self-hosted servers — this means your data benefits from their enterprise-grade security investments:

Provider	Role
Supabase	Encrypted document storage, database, and authentication
Netlify	Application hosting
Anthropic (Claude API)	AI processing for cited answers, over an encrypted connection
Stripe	PCI-compliant payment processing — Docly never sees your full card number

Access controls

Your account data is protected by row-level access rules, so one user's account information is never reachable by another user's account.
Documents you upload exist only in your active session to generate answers — they are not stored on our servers, so there's nothing tied to your account to secure beyond your account and usage data.
Internal access to user data is limited to what's necessary to operate and support the Service.
Account passwords are hashed — we don't store them in plain text, and we can't see your password even if we wanted to.

Your control over your data

Since documents aren't stored, there's nothing to delete on our end — closing the app or uploading a new document clears the previous one immediately.
Close your account whenever you want, which removes your personal account data as described in our Privacy Policy.

Reporting a security concern

If you believe you've found a security vulnerability in Docly, we want to know. Please email us at hello@askyourdocly.com with details, and we'll respond promptly.

Want more detail?

See our full Privacy Policy for details on what we collect and how long we keep it, or our Terms of Service for the rules of using Docly.