SECURITY
Your documents. Nobody else's.
Contracts, IDs and leases are not ordinary files. Here is exactly how AskRoby protects yours — in plain language, including what we check ourselves every night and what we have not finished.
Only you can open your documents
Access is enforced by the database itself, on every single row — not by app code that could have a bug. Your account can only ever reach your own memories, the ones your workspace shares, and the ones somebody deliberately shared with you.
Checked every night, not just promised
Every night an automated check stands in for every account in the system and confirms that none of them can reach another account’s documents, page text or search index. If that ever stopped being true we would find out the next morning — not from a customer.
Two-step verification is required
A password on its own opens nothing. The second factor is enforced at the database level, so even a stolen password returns no documents. New accounts get a short window to set it up, and after that it is mandatory.
We cannot read your documents
Our own admin tools show counts, sizes and whether processing worked — never the contents. Support cannot open your contracts to help you, by design, because the alternative is a company that can read everything it stores.
AI reads your documents — here is how
To turn a scan into searchable text and pull out dates and amounts, pages are sent to our AI provider over an encrypted connection and processed for that request. We do not sell your data and we do not use your documents to advertise to you. Our Privacy Policy names every provider involved.
Encrypted, and the original is deleted
Everything travels over HTTPS and is stored encrypted. Once a document has been read, the original file you uploaded is deleted — we keep the page images and the text, not the file. Images are served through links that expire within the hour.
Sharing you control, and can undo
An invitation works only for the exact email address you typed — forwarding it does not grant access. You can see who has access, take it back at any time, and see a record of who deleted what.
Backups that are actually tested
Roby doesn't just answer — wherever possible it shows the exact page and the original document behind every answer, so you can verify the source yourself.
What we have not done yet
We are a small team, and we would rather say this than let you assume otherwise: we do not yet hold a SOC 2 or ISO 27001 certification, we have not commissioned an external penetration test, and screening passwords against public breach lists is on our list but not switched on. If any of those are requirements for you, ask us before you upload.
Ningún servicio en línea puede prometer seguridad absoluta, y una empresa que lo promete te está diciendo algo que no puede saber. Cuida tu segundo factor y avísanos de inmediato si algo se ve raro en tu cuenta. Esta página describe cómo funciona el producto hoy y se actualiza cuando eso cambia.