How we protect your documents and identity

Encryption in transit

Traffic to this site is served over HTTPS using industry-standard TLS, so the connection between your browser and our server is encrypted. The site is configured with HTTP Strict Transport Security so browsers use the secure connection.

Accounts and authentication

Your account is protected by a password, which is stored only as a salted bcrypt hash, never in plain text. Sign-in sessions use secure, HTTP-only cookies, and login endpoints are rate-limited to slow down automated guessing. You can reset your password by email if you forget it.

Access controls

Your documents and session history are tied to your account. When you request a document, the server checks that it belongs to you before releasing it. Live notarization sessions are protected by unique, unguessable access links, and each participant's role (signer or notary) is verified. There are no public, guessable document URLs.

Document storage

Uploaded documents and finished sealed PDFs are stored on a private server volume, not in a public location. Downloads require an authenticated, authorized request. Your finished document is available to you in your account and to the notary as part of the notarial record.

Uploads

Document uploads are restricted by file type and size, and stored under randomized file names so they cannot be guessed. Identity documents you provide are stored privately and are only ever released to the notary through the authenticated admin area.

Payments

Card payments are handled by Stripe, a PCI-compliant payment processor. We do not see or store your full card number. Prices are always calculated on our server, so a total cannot be altered in your browser, and payment confirmations are verified directly with Stripe.

Live video sessions

Your notarization session runs over a direct, peer-to-peer WebRTC connection between you and the notary. Our server relays only the small messages needed to set up the call, gated by your session's access tokens. The session is audio-video recorded as New Jersey requires, and the recording is retained as part of the notarial record.

Tamper-evident sealing

Your finished document receives a cryptographic digital signature, so any change made after notarization can be detected when the seal is verified. The private signing key used to seal documents is held only on the server and is never exposed to your browser.

Administrative access

The notary's admin area is a separate, password-protected area with its own rate limiting. Sensitive records such as identity documents and recordings are only accessible through that authenticated area.

Data retention and your choices

Notarial records must be retained for a period set by New Jersey law. Other account information is kept while your account is active. To learn what we collect and how to request changes, see our privacy page.