Security at WhiskFile
You upload sensitive documents — contracts, financial records, personal IDs. We treat that trust seriously. Here is exactly how we protect your files.
How we protect your files
TLS encryption in transit
Every connection uses TLS 1.2+ with modern cipher suites. Files are encrypted from your browser to our servers — no exceptions.
Auto-deleted after 1 hour
Uploaded and processed files are permanently deleted within 1 hour. No cold storage, no backups, no residual copies. Deletion is verified, not scheduled.
ClamAV malware scanning
Every uploaded file is scanned with ClamAV before processing. Infected files are quarantined and deleted immediately — they never reach processing workers.
Isolated processing
Each file is processed in an isolated job with its own temporary workspace. Jobs cannot access other users' files. Workers run under least-privilege OS accounts.
No human access to files
WhiskFile staff do not access uploaded files. There is no admin panel to view or download user documents. Access logs track all R2 storage operations.
34 tools run in your browser
Over half of our tools (merge, rotate, split, reorder, and more) run entirely in your browser using WebAssembly. Your file never leaves your device.
Data retention schedule
| Data | Retention | Details |
|---|---|---|
| Uploaded files | Deleted within 1 hour | Stored temporarily in Cloudflare R2 with per-file expiry. Auto-deletion verified by cron. |
| Processed output files | Deleted within 1 hour | Same lifecycle as uploads. Download links expire automatically. |
| Job metadata | 30 days (free) / 90 days (Pro) | Tool name, file size, status, timestamps. No file content stored. |
| Account data | Until account deletion | Email, plan, usage counters. Deleted within 7 days of account closure. |
| Payment data | Managed by Cashfree | Card numbers, billing addresses stored exclusively in Cashfree's PCI-DSS compliant vault. |
| Analytics data | Aggregated, no PII | Page views and tool usage via Plausible. No IP addresses, cookies, or fingerprints stored. |
Infrastructure & application security
- HTTPS enforced sitewide — HTTP requests are permanently redirected (HSTS preload enabled)
- Content Security Policy (CSP) headers restrict script sources and prevent XSS attacks
- SSRF protection validates all URLs against private IP ranges before fetching
- Rate limiting on all API endpoints prevents abuse and brute-force attacks
- Input validation and file-type verification on every upload before processing
- No cookies for analytics — Plausible runs cookieless and GDPR-ready by default
- Cashfree handles all payment data — card numbers never touch WhiskFile servers
- Auth.js (next-auth) for authentication with signed JWT tokens and CSRF protection
- Dependencies audited regularly — automated alerts for known CVEs
- Infrastructure runs on dedicated VPS — no shared hosting, no multi-tenant storage
Compliance
GDPR
WhiskFile complies with the EU General Data Protection Regulation. Users can request data export or deletion at any time. No personal data is shared with third parties for marketing. Processing is based on legitimate interest (providing the service) and consent (account creation).
CCPA
California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. WhiskFile does not sell personal data. Contact support@whiskfile.com to exercise your rights.
Responsible disclosure
If you discover a security vulnerability, please report it responsibly. Do not publicly disclose the issue until we've had time to address it. We take every report seriously and will respond within 48 hours.
Email: support@whiskfile.com
Have questions about security?
Read our full privacy policy or get in touch directly.