Security
Effective date: August 31, 2026 · DURU LLC, New York, United States
This document is provided for transparency and is pending final review by DURU LLC's legal counsel before production publication. Items marked "FOR CONFIRMATION" require verification.
Security is central to DuruVault. Current protections include:
- Encryption of data in transit (TLS)
- Multiple authentication options (password, Google, email codes, authenticator apps, passkeys)
- Session and device controls, and per-user isolation
- Audit logging and uploaded-file validation
- Controlled document sharing (password, expiry, revocation)
Document access
Private documents are served only through short-lived, authenticated requests — never permanent public URLs. Documents are stored with our cloud storage provider.
No absolute guarantee
No internet-connected system or cloud service can be described as '100% secure'. We apply layered, industry-standard protections and continue to improve them. Responsible-disclosure reports are welcome.