What happens to your documents
Plain answers about your files, who can see them and how they're protected. Everything here is how Dokkiman works today.
Your files
Edited, signed or converted: not kept
Edit, sign, compress, split, merge and convert work on your file and send it straight back. We don’t keep a copy.
Saved: private to you
A document is only stored if you save it to your Document Manager or upload it to chat. Only your account can open it.
Delete it any time
Delete a document, or your whole account and everything in it, yourself. It’s removed at once, and from backups within 40 days.
Trying it without an account
A document you upload to chat as a guest is deleted within 24 hours, unless you sign up and keep it.
AI doesn’t learn from your files
To answer your questions, documents are processed by OpenAI. They aren’t used to train AI models.
No ads, no selling
We don’t sell your data, show ads, or use advertising or analytics trackers.
How we protect them
Encrypted connections
Everything travels over HTTPS, and browsers are told to never connect to Dokkiman any other way.
Private signing links
Each signer gets their own link. We store only a fingerprint of it, and it stops working once the document is signed.
Passwords never stored
Only a scrypt hash of your password is kept, sign-in cookies are sent only over HTTPS, and repeated sign-in attempts are slowed down.
Hosted on AWS
Dokkiman runs on Amazon Web Services in the United States (Ohio). Nightly backups are encrypted.
Payments by Stripe
Card details go straight to Stripe’s secure checkout. They never touch our servers.
Proof of every signature
Each signed document gets a Certificate of Completion: who signed, when, from which IP address, and a fingerprint of the file.
Questions
Who can see my documents?
Only you. People you send a document to see that document while they sign it. Our admin tools show account details like your email, plan and how many documents you have, not what's in them.
Are e-signatures from Dokkiman legally binding?
For most contracts, yes: the US ESIGN Act and UETA give electronic signatures the same effect as handwritten ones when the signer means to sign and agrees to sign electronically. Signers tick a box agreeing to it, and every request ends with a Certificate of Completion. Some documents, like wills, have other rules. See Request Signatures for more. This is general information, not legal advice.
What do you keep when I sign a document myself?
Not the document. We keep a short record of the signing (your name, the time, your IP address, the file name and a fingerprint of the file before and after) so the signature can be checked later. It's deleted with your account.
Is Dokkiman SOC 2, HIPAA or ISO 27001 certified?
No. We haven't been audited or certified under these, and we don't sign data agreements like HIPAA BAAs yet. If your organization requires one, Dokkiman may not be the right fit for those documents today.
How do I report a security problem?
Please tell us through Support (choose “Report a problem”). We read every message and will reply.
The details are in our Privacy Policy and Terms of Service. How signatures hold up: E-signature law.
Last updated October 11, 2026