Security Built for
Zero Compromise
Your business documents contain sensitive financial, legal, and personal customer data. cognitive string is engineered from the foundation with strict Zero Data Retention and on-premise local folder options.

Zero Data Retention (ZDR)
When you process documents via our cloud API or web studio, files are handled in ephemeral RAM. The moment processing completes and your Word DOCX or JSON is delivered, all buffers are permanently purged.
Local Folder Mode
Our Local Folder Watcher allows enterprise teams to process confidential scan queues directly on their local workstation or company network drives. Zero bytes of sensitive document contents ever leave your perimeter.
Private VPC & Air-Gap
For banks, healthcare systems, and defense contractors, cognitive string packages DocuAILens into hardened Docker containers ready for deployment inside your own AWS, GCP, or on-prem Kubernetes clusters.
Compliance & Security Architecture Standards
SOC 2 Type II Alignment
Engineered in compliance with Trust Services Criteria for Security, Availability, Processing Integrity, and Confidentiality. Continuous monitoring of infrastructure and code changes.
GDPR & CCPA Compliant
Strict adherence to GDPR Article 28 data processor obligations. Zero persistent storage of personal identifiers without explicit contractual request.
End-to-End Encryption
All communication between clients and DocuAILens endpoints is enforced with TLS 1.3 encryption using modern cryptographic suites. Ephemeral storage is encrypted with AES-256.
Role-Based API Key Control
Granular API key management with IP whitelisting, rate-limiting, and auditable request logging so security teams maintain complete control.
Need a Vendor Security Questionnaire or BAA?
Our engineering leadership will gladly complete your organization’s security review and discuss air-gapped on-premise licensing.
