Sign in

Security and data handling review packet.

Use this page as the public entry point for PaperJSX security review. It links the buyer-critical documents that describe the cloud service boundary, data handling, subprocessors, and legal terms without turning security into a separate product story.

TLS 1.2+ in transitAES-256 at restMFA on admin infrastructurePublic DPA and subprocessors

[01] Scope

Cloud service security and self-hosted boundaries are documented separately.

PaperJSX publishes the cloud-hosted processing boundary in the privacy policy and DPA. Self-hosted package usage stays on your own infrastructure and follows the package license and your own environment controls.

[02] Review packet

Start here, then move through the linked legal documents.

Read the privacy policy for security controls, the DPA for processing terms, the subprocessors page for vendors, and the terms page for service boundaries and commercial terms.

Need the legal packet too?

Privacy, DPA, subprocessors, and terms stay public so evaluation and procurement can review the same source set.