Security
Last updated: 31 October 2026
Data in transit and at rest
All traffic is TLS 1.2+. Files are stored on an encrypted volume and deleted automatically 24 hours after upload.
Access
Only the operator has server access, via SSH keys. There is no shared staff access and no third-party support tooling with file access.
AI providers
Page images and text are sent to Anthropic and/or Google APIs for extraction under enterprise API terms (no training, no retention beyond abuse monitoring).
Payments
Card and PayPal data never touch our systems; PayPal and Polar (both PCI-DSS compliant) handle checkout.
Reporting
Found a vulnerability? Email hello@sadeam.space. We acknowledge within 48 hours.