Legal · Security
Security
Reference material for security teams reviewing AspisFile, and for anyone who needs to report a problem to us. These pages describe what the product does today. Where something is planned rather than shipped, it is marked as such.
Documents
Publisher identity and code signing, installer checksums, the network endpoints the viewer contacts, and a plain explanation of the behaviours that look unusual to endpoint security software. Written for allowlisting review.
The read-only API that pulls your account's audit trail into your own security tooling, what each record contains, and what it never contains.
Current status of the customer-facing components and 90-day availability, published from our own monitoring.
Reporting a vulnerability
Send findings to security@aspisfile.com. We acknowledge reports and will tell you what we intend to do about them. Our contact details are also published at aspisfile.com/.well-known/security.txt.
Please do not test against other people's documents or accounts. If you need an account to test with, ask us and we will arrange one.
Data protection and contracts
Our Terms of Service include the data processing terms for business customers, with annexes covering the processing carried out, the current list of subprocessors and their locations, and the technical and organisational measures in place.
See also the Privacy Policy and our GDPR statement. For a security questionnaire, a copy of a subprocessor's assurance report under NDA, or a data processing agreement, contact privacy@aspisfile.com.