Your documents stay yours.
You trust DocKnox with IDs, passports, contracts and financial records. This page explains plainly how we protect them, where they are stored, and how we meet our obligations under the Protection of Personal Information Act (POPIA).
Encryption
Documents are encrypted at rest and in transit (TLS). Access to stored files requires an authenticated, authorised request.
Access control
Every request is checked against your account, role and permissions at the database level, not just in the app.
Two-factor login
Two-factor authentication is available on every plan, including the free plan. Business admins can make it compulsory.
Controlled sharing
Share links can expire, be view-only and be revoked at any time. Every view and download is logged.
AI with limits
Documents are processed only to extract fields for you. They are not used to train AI models.
Your data, portable
Export all your documents and extracted data whenever you like, or delete your account and files.
Hosting and cross-border transfers
Your documents and data are stored in [Hosting region]. Where personal information is processed outside South Africa, including by our AI provider, we do so only under the conditions in section 72 of POPIA, with providers bound by agreements that require an adequate level of protection.
- Hosting and storage: [provider, region]
- AI processing: [provider, region]
- Email delivery: [provider]
- Payments: [provider]
How we meet our POPIA obligations
For your account details we are the responsible party. For the documents you upload, you decide what is stored and why, and we process them on your instructions. Either way, we apply the same safeguards.
- A registered Information Officer: [name, email]
- Personal information used only to provide the service
- Security safeguards reviewed regularly
- Affected users and the Information Regulator notified of any security compromise, as POPIA requires
- Requests to access, correct or delete information handled promptly
Nothing kept longer than it should be
You control how long documents are kept. On the Professional plan you can set retention rules by document type. When you delete a document or close your account, it is permanently removed from our systems after a short recovery window, and from backups on their normal cycle.
- Delete any document at any time
- Export everything before you leave
- Set retention rules (Professional and Enterprise)
- Ask us to confirm deletion in writing
Policies and requests
Read the detail, or contact our Information Officer about your personal information.