Security, Privacy & Data Protection
We treat corporate SOPs, internal trade secrets, and healthcare compliance documentation with zero-trust architectural rigor. Learn how DocScorm safeguards your organizational IP.
Zero Data Retention Guarantee
Your uploaded SOPs, documents, and videos are processed ephemerally in RAM during compilation and are immediately flushed once the SCORM .ZIP is delivered. We do not retain your intellectual property on persistent disks.
In-Browser Client-Side Processing
Large media files (such as 1GB+ MP4 videos) have audio isolated in-browser using the Web Audio API (`OfflineAudioContext`). Full video files never hit external cloud servers.
TLS 1.3 & AES-256 Encryption
All communications are encrypted in transit using TLS 1.3 with modern cipher suites. User authentication tokens and payment sessions are handled via SOC 2 compliant infrastructure (Supabase & Paddle).
Vulnerability Disclosure & Bug Bounty
DocScorm welcomes responsible security disclosure from researchers and ethical hackers. In compliance with RFC 9116, our security policy and contact details are available at /.well-known/security.txt.
To report a suspected vulnerability, contact our security response team directly at security@docscorm.com.