Security

PrivyDocs is built with security at its core. This guide covers all the security features available to protect your sensitive documents.

End-to-End Encryption (E2EE)

Available on: Pro and Business plans

End-to-end encryption ensures that your document is encrypted in your browser before it's uploaded to PrivyDocs servers. The encryption key never leaves your device, which means:

• PrivyDocs servers cannot read your document content.
• Only users with the decryption key (embedded in the share link) can view the document.
• Even in the event of a server breach, encrypted documents remain unreadable.

How E2EE Works

1. When uploading, toggle the E2EE option on.
2. Your browser generates a unique encryption key and encrypts the PDF.
3. The encrypted file is uploaded to PrivyDocs servers.
4. The encryption key is embedded in the share link URL fragment (after the #), which is never sent to the server.
5. When a viewer opens the link, their browser downloads the encrypted file and decrypts it locally.

E2EE Considerations

• Encrypted downloads require the viewer to provide the decryption key.
• E2EE documents have a special download dialog that handles decryption.
• PDF replacement is supported — the new PDF is encrypted with the same key.

Password Protection

Available on: All plans

Add a password to any share link to create an additional access barrier. When enabled:

• Viewers must enter the correct password before the document is displayed.
• Passwords are securely hashed before storage — they cannot be recovered, only reset.
• Each share link can have its own unique password.

Email Verification

Available on: Pro and Business plans

Require viewers to verify their email address before accessing a document:

Basic Email Gate

• Viewer enters their email address.
• Email is recorded as a contact for tracking.

Email OTP Verification

• A one-time code is sent to the viewer's email.
• The viewer must enter the code to confirm they own the email address.
• Prevents impersonation and ensures accurate contact tracking.

Email Whitelist

Restrict access to specific email addresses or domains:

• Individual emails — Enter specific addresses, one per line (e.g., [email protected]).
• Domain whitelist — Use wildcard syntax *@domain.com to allow all addresses from a domain. (Business plan only)

WhatsApp Verification

Available on: Pro and Business plans

Require viewers to verify their WhatsApp phone number:

Basic WhatsApp Gate

• Viewer enters their WhatsApp phone number.
• The number is recorded as a contact.

WhatsApp OTP Verification

• A one-time code is sent via WhatsApp message.
• The viewer must enter the code to confirm ownership.
• Ensures accurate phone number tracking.

Watermarks

Available on: Pro (basic) and Business (advanced) plans

Overlay dynamic text on every page of a document when viewed through a share link. Watermarks deter unauthorized redistribution by making each view identifiable.

Dynamic Placeholders

Insert viewer-specific information into watermark text:

Position Control (Business plan)

Choose watermark position:

• Diagonal — Large, centered, rotated text across each page.
• Top — Horizontal text bar at the top.
• Bottom — Horizontal text bar at the bottom.

Opacity Control

Adjust watermark opacity from 10% to 100%. Default is 30%.

Download Controls

Available on: Business plan

Fine-grained control over what viewers can do with downloaded documents:

Disable Printing

Prevent viewers from printing the document from the PDF viewer.

Disable Copying

Prevent viewers from selecting and copying text from the document.

Download Password Protection

Protect downloaded PDF files with a password, adding a layer of security even after download.

PDF Open Alert

Display a custom alert message when the downloaded PDF is opened.

Access Notifications

Available on: Pro and Business plans

Receive email notifications whenever a viewer accesses a share link. This allows you to:

• Know in real time when your document is being viewed.
• Track access patterns without checking analytics.
• Respond quickly to sensitive document views.

Summary of Security Features by Plan