Trust centre
Your paperwork is often your most sensitive data.
Here is exactly how Formalini handles it — in plain language, with no security theatre.
Private storage
Files sit in private storage. Links are short-lived and signed — there is no public URL for your documents.
Access control
Every record is bound to a workspace. Personal vaults are separate spaces no team can read.
AI processing
Documents are sent to our AI provider only to extract the fields you asked for, and are not used to train models.
Traceability
Original file, extracted values, corrections and approvals are kept together with timestamps.
Deletion
Delete a file or your account and the stored original and extracted values go with it.
Hosting
Application and database run on managed European-capable cloud infrastructure with encryption in transit and at rest.
Reporting a security issue
Email security@formalini.com with steps to reproduce. We acknowledge reports within two business days and will not pursue researchers acting in good faith.
Certifications
Formalini is an early-stage product and does not yet hold an ISO 27001 or SOC 2 certificate. We describe our actual controls above rather than implying audits we have not completed.