Admins and evaluators5 min read

Security and Trust

This section covers privacy, separated access models, auditability, and product behaviors that matter in sensitive document environments.

Main guide

Why trust is a structural topic

Trust in FlexFiles is not only about policy text. It comes from the product structure itself: separated access models, controlled intake paths, auditable status changes, and limited distribution channels that do not require full workspace exposure.

Facts at a glance

  • Files are uploaded over HTTPS and processed on FlexFiles servers. No conversion tool runs in your browser.
  • Signed-out conversions are deleted about 2 hours after you make them. When you're signed in, your plan sets how long converted files are kept: the Pricing page lists it for each plan as "Auto-remove converted files", and on some plans files stay until you delete them.
  • Guest upload links can require a password, expire on a date you set, and be revoked at any time. Uploads through them are rate-limited and checked with reCAPTCHA, and guests never get access to the workspace itself.
  • In team workspaces, owners, editors and viewers have different rights, and each folder can restrict who may download or share its files.
  • The AI Document Assistant only answers from documents the person asking is allowed to open. Permissions are checked on the server, not in the browser.

In this section