Your clients' data is sensitive. We treat it that way.

TOTP-based 2FA available for all staff and admin accounts. Recovery codes provided on setup. Admin accounts can enforce 2FA organisation-wide.

Immigration clients log in via OTP sent to their registered email — no password to remember or leak.

Server-side sessions stored in PostgreSQL. Sessions expire on logout. No tokens stored in localStorage or cookies beyond the session identifier.

Authentication endpoints are rate-limited. Accounts are automatically locked after 3 failed login attempts, requiring a password reset.

Admin, staff, billing, and document user roles. Staff see only their assigned clients. Administrators control all visibility settings per user.

Accounts created via API are required to change their password on first login, preventing credential reuse from bulk provisioning.

Every organisation operates in a fully isolated data environment. No query can return data belonging to another organisation. Enforced at the database query level.

All uploaded documents stored on Google Cloud Storage with server-side encryption at rest. Files are accessed via signed, time-limited URLs — never exposed directly.

All connections to DocsCheck are encrypted via HTTPS/TLS. HTTP connections are redirected to HTTPS automatically. No unencrypted data transmission.

Passwords are stored as bcrypt hashes with a cost factor of 12. We cannot read your password — only verify it. Password resets use time-limited one-time tokens.

Every login attempt is logged with IP address, user agent, timestamp, and result (success/failure). Accessible to organisation administrators.

All significant admin and staff actions are logged: document uploads, approvals, rejections, client creations, staff assignments, and letter generation.

Automated daily health checks monitor platform availability, error rates, and security indicators. Alerts are sent to the operations team on anomaly detection.

API calls, email sends, AI analyses, and storage usage are tracked per organisation. Anomalous usage patterns trigger review.