1. Account Isolation
Documents, extraction runs, API tokens, billing records, webhooks, usage history, settings, audit logs, and team membership are scoped to customer accounts. Workspace roles separate owner, admin, developer, billing, support, and member workflows so users only receive the access needed for their role.
2. API Security
Account API tokens are stored as hashes and revealed only once at creation. API responses include request IDs for support tracing. API endpoints use account and token rate limits, idempotency controls, credit gates, and normalized error envelopes.
3. Webhook Security
Webhook signing secrets are revealed once and used to sign outbound payloads. Delivery records include event type, status, response code, attempt count, and delivery context so customers can investigate receiver issues.
4. File Intake
Uploads are checked against supported file extensions, MIME signals, content signatures, applicable size limits, and scanner status before processing starts. Files can be blocked when they are unsupported, unsafe, over limit, or not eligible for live extraction.
Blocked files do not proceed to processing and can be investigated through machine-readable status and reason fields.
5. Billing And Credit Controls
Billing records show the applicable rate and usage for each live extraction. Credits are returned when processing ends without a usable result or retrievable extracted fields, and files blocked before processing do not consume credits. Top-ups and billing self-service use Stripe-hosted payment surfaces.
6. Service Status
Service status and incident response cover document processing, billing, webhook delivery, uploads, and customer communications.
7. Related Security Documents
For GDPR-specific measures, review the Technical and Organizational Measures. For subprocessor security boundaries, review the Subprocessor List.
8. Security Contact
Send vulnerability reports and security questions to security@exdata.app. Include the affected endpoint or feature, reproduction steps, and potential impact where possible.