Security

Your documents stay yours.

Articles of association, contracts, accounts: what you upload to Airval is the most sensitive material you have. Here is how we protect it.

Documents encrypted at rest
Every file in the data room is encrypted with AES-256-GCM before it is written to disk, and its fingerprint is checked on every read. No document has a public address.
A single way to download
A document can only leave through a download that checks your rights and is recorded in the access log.
Role-based access
Owner, admin, member: everyone sees and does what their role allows. One organisation’s data is never visible to another.
Audit log
Sign-ins, sign-outs, downloads and role changes are logged, with the date and IP address.
Protected accounts
Passwords stored as argon2id hashes, revocable sessions of which the database only keeps a hash, limited sign-in attempts.
Hardened browsing
Encrypted connection (HTTPS), a content security policy with no third-party resources, protection against request forgery on every form.

Hosting and reporting

Hosting: host and country : to be completed.

Think you’ve found a vulnerability? Write to us at contact@airval.example: we will reply and fix it as a priority.

How we process your data is set out in our privacy policy.