Security summary
How ScanCDE handles your data
What follows describes what the product does today. Inside the product, a "Security and trust" sheet reports these facts live from your own installation.
What it holds
| Your files | Not copied. ScanCDE reads file names, folders, statuses, dates, uploader names and a link back. It reads your registers (Excel) and stores their rows. The one exception is a document signed in ScanCDE: the finished, sealed PDF is kept, encrypted, so that any later change can be detected. |
|---|
| Changes to your CDE | None. Connections are read-only and ScanCDE has no way to write to your systems. |
|---|
| People | Name, work email, company and role for each user. |
|---|
| PDF checks | The result and the numbers found in the text. The PDF itself is not kept. |
|---|
Where it runs
| One installation per client | Your own server, database, secrets and licence. There is no shared database between clients. |
|---|
| Hosting | Hosted by us in a region you agree, or run by your IT team on your own infrastructure. |
|---|
| Network | Users connect over HTTPS. The database is not reachable from the network. ScanCDE makes outbound HTTPS calls only to the systems it reads and, if you enable it, to an email service. |
|---|
Who can do what
| Sign-in | Password with optional or required two-step verification (authenticator app and recovery codes), or Microsoft 365. Failed attempts are limited; idle sessions expire. |
|---|
| Roles | Administrator, member, viewer and delivery partner, enforced on the server for every request, not only in the screens. |
|---|
| Delivery partners | Cut down on the server to their own company's documents. Other parts of the product are closed to them. |
|---|
| Activity log | Sign-ins, failed attempts and changes are recorded, and every register change keeps who, when, before and after. |
|---|
Protection and recovery
| Stored credentials | Connections to your systems are stored encrypted (AES-256-GCM). Passwords are stored as one-way hashes. |
|---|
| Backups | Nightly database backups, with an encrypted off-site copy. A restore has been tested. |
|---|
| Data leaving | Nothing is sent to AI services. The system sends the emails you ask of it (invitations, password links, signing requests). When a document is signed, a short fingerprint of the signature (never the document) goes to a public time-stamping service to prove when it was signed. |
|---|
| Safe scanning | A scan that cannot read everything does not overwrite the last complete results, and says so. |
|---|
| If a licence lapses | The installation becomes read-only, never locked: you can always read and export your data. |
|---|
Reporting a security concern
If you think you have found a weakness in ScanCDE, write to security@scancde.com. We will acknowledge it promptly and tell you when it is fixed. Please test only against your own account or a system we have given you, do not read or change anyone else's data, and give us reasonable time to fix a problem before you tell anyone else. Our contact details are also published at /.well-known/security.txt.
Questions from your IT or procurement team
Send us your security questionnaire and we will answer it in full. Your IT team is welcome to speak to ours about how ScanCDE is built, hosted, backed up and recovered. Write to support@scancde.com.
Request a free 7-day trial
