SECURITY
Your documents. Nobody else's.
Contracts, IDs and leases are not ordinary files. Here is exactly how AskRoby protects yours — in plain language, including what we check ourselves every night and what we have not finished.
Only you can open your documents
Access is enforced by the database itself, on every single row — not by app code that could have a bug. Your account can only ever reach your own memories, the ones your workspace shares, and the ones somebody deliberately shared with you.
Checked every night, not just promised
Every night an automated check stands in for every account in the system and confirms that none of them can reach another account's documents, page text or search index. If a check fails it emails us that night, and keeps reminding us until it is fixed — so a problem is found by the check, not by a customer.
Two-step verification is required
A password on its own opens nothing. The second factor is enforced at the database level, so even a stolen password returns no documents. New accounts get a short window to set it up, and after that it is mandatory.
We do not read your documents
AskRoby's systems process your documents automatically — that is how the text, the search and the answers exist at all. But no screen in our support or admin tools can open a customer's document: they show counts, sizes and whether processing worked, never the contents. People with infrastructure access could technically reach stored data, as at any company that hosts anything. We do not, in the ordinary running of the service, and we will not for your account unless you have asked us to in writing.
AI reads your documents — here is how
To turn a scan into searchable text and pull out dates and amounts, pages are sent to our AI provider over an encrypted connection and processed for that request. We do not sell your data and we do not use your documents to advertise to you. Our Privacy Policy names every provider involved.
Encrypted, and the original is deleted
Everything travels over HTTPS, and our infrastructure providers encrypt what they store. Once your document has been read we delete the file you uploaded — within two days at the latest, whatever state the reading finished in — and keep the page images and the text instead. Page images are shown through links that expire within the hour, so a link that leaks stops working.
Sharing you control, and can undo
An invitation works only for the exact email address you typed — forwarding it does not grant access. You can see who has access, take it back at any time, and see a record of who deleted what.
Backups that are actually tested
Your pages are copied every day to separate offsite storage, and once a week one whole document is restored from that copy and compared byte for byte. A backup nobody has restored from is a rumour. AskRoby is not your archive, though: keep your own copy of anything that matters. And when you delete a memory it goes from the live service, and from the offsite copy about a day later.
Every answer shows its page
Roby doesn't just answer — wherever possible it shows the exact page behind every answer, so you can check the source yourself.
What we have not done yet
We are a small team, and we would rather say this than let you assume otherwise: we do not yet hold a SOC 2 or ISO 27001 certification, we have not commissioned an external penetration test, and screening passwords against public breach lists is on our list but not switched on. If any of those are requirements for you, ask us before you upload.
No online service can promise absolute security, and a company that promises it is telling you something it cannot know. Look after your second factor and tell us at once if anything looks wrong with your account. This page describes how the product works today, and is updated when that changes.