What happens to a document
From the client’s phone to your review screen, a file takes one path.
- 1
Straight to encrypted storage
Uploads go directly from the browser to storage through a short-lived signed link, issued only after a permission check. Files are encrypted at rest with a customer-managed key in AWS KMS.
- 2
Checked before anyone opens it
Sealio checks that a file’s contents match its type and deletes files that do not. On plans that include malware scanning, every file is scanned before your team can open it.
- 3
Opened only by permission
Downloads use the same short-lived links, minted after a role check. Every preview and download is recorded.
In place today
This list mirrors the security page of the help centre, which also says what is planned.
- Your firm’s data is kept separate
- Every record belongs to exactly one firm. Separation is enforced in the application and again in the database with row-level security, so a bug in one query cannot expose another firm’s data.
- A tamper-evident audit trail
- Entries are append-only and linked with SHA-256 hashes. An action and its audit entry are saved together; if one fails, neither is kept. Admins can filter, export and verify the log.
- Strong sign-in
- Passwords of at least 12 characters, checked against known breaches and stored as Argon2id hashes; email confirmation by 6-digit code; two-factor sign-in with an authenticator app.
- Protection against guessing
- Sign-up and sign-in are protected by a Cloudflare Turnstile check and attempt limits. After five wrong passwords, sign-in for that email is blocked for 15 minutes, then longer.
- No client passwords to leak
- Clients use a personal link valid for 30 days plus a one-time 6-digit code that works for 10 minutes.
- Retention you choose
- Keep uploaded files until you delete them, or for a set period from 30 days to 7 years after a request closes.
- Permanent deletion
- When a client asks to be erased, delete their details and every file they uploaded. The audit log records that it happened, not what was erased.
PlannedPasskeys, single sign-on for enterprise firms, firm-wide required two-factor sign-in, and a nightly integrity check of every audit chain with long-term archiving.
What happens to one passport scan
A worked example with made-up names. Every step is something Sealio does today.
A client photographs their passport and uploads it from their phone. The file goes straight from the browser to encrypted storage through a short-lived signed link; it never passes through an inbox or through Sealio’s application servers. Sealio checks that the file really is the image type it claims to be before anyone on the team can open it.
When a reviewer opens the preview, the audit trail records who viewed it and when. Two years after the application closes, the firm’s retention setting deletes the file automatically, and the request’s history still shows that it was collected and accepted.
Security: questions and answers
Where are documents stored?
In Amazon S3, encrypted at rest with a customer-managed key in AWS KMS. Uploads and downloads go directly between the browser and storage through short-lived signed links.
Can another firm see my clients’ documents?
No. Every record belongs to exactly one firm, and the database itself only returns rows for the firm making the request (row-level security).
Is there an audit trail?
Yes. Sealio records every change, every document view and download, and every email sent to a client. Entries cannot be edited or deleted and are linked with cryptographic hashes.
Are uploads scanned for malware?
Every upload’s contents are checked against its file type. Malware scanning is included in the free trial and on plans that list it; files that fail are deleted at once.
Related features
Your next client is the last item on the list.
Start with a ready-made checklist or build your own, invite a client, and watch the stamps land.