How your documents are protected
Your documents stay yours. They are processed only to provide the features you use, sent to the AI provider only when you use an AI feature, and never used to train AI.
AI
AI only when you ask for it
Document content goes to our AI provider, Anthropic (Claude), only when you or your recipients use an AI feature, and only what that task needs.
-
Not used to train AI
We do not use your documents for advertising or to train AI models, and neither does our AI provider.
-
AI off per document
Turn AI off for a confidential document. Its content is not sent to the AI provider, and the automatic checks still run.
-
You choose who sees the analysis
When you send a document for signature, the analysis is visible to you only, to you and the approvers, or to all recipients, with or without the findings and questions.
-
Suggestions, not decisions
AI results are suggestions for people to check. No decision about anyone is made by AI alone.
The platform
How the service is protected
-
Encrypted connections
Every connection uses HTTPS.
-
Sign in with Google
No Lookdocu password to keep. Sign-in sessions last 30 days, and you can sign out on all devices from My Account.
-
Fingerprints, not secrets
Sign-in sessions and API tokens are stored as SHA-256 fingerprints, not as the original text.
-
Encrypted tokens and backups
Tokens kept for connected apps (Notion) are encrypted with AES-256-GCM, and backups are encrypted.
-
Limited staff access
Server access is limited to named staff with key-based login. Administrators cannot open your documents from the admin panel, and every change they make is logged.
-
Links that expire
Download links expire after 30 days. A cancelled document's signing links stop working at once.
Access
Who can see a document
- Teams
- Share a folder with your team: members see its documents' status, recipients, history and files. Only the owner can change, send or delete them, and sharing can be stopped at any time.
- Company stamps
- Only team admins can apply them, and each stamp can be checked by its QR code.
- Recipients
- Each recipient gets their own link. You can require a recipient to sign in with the email address you sent it to.
- Connected apps
- Only a Google or Notion account with the same email as your Lookdocu sign-in can be connected, and Lookdocu reaches only the files and pages it creates there.
Personal data
Less personal data, kept for less time
-
Redaction for real
Redact Personal Data removes NIK, KK, NPWP, bank account and phone numbers from the PDF itself, not just covers them.
-
Short-lived originals
Original files read by Extract Data are kept for 1, 7 or 30 days, as chosen at upload. ID cards and medical records default to 1 day.
-
Delete when you want
Delete a document at any time, or your whole account from My Account. Deleted data is removed from backups within 14 days.
-
A copy of your data
Download my data in My Account gives you your account data, documents and their history in one file.
Developers
Safe to connect to your systems
- API tokens limited to the modules you pick, with an optional expiry, and revocable at any time
- Each token is shown once, and stored only as a fingerprint
- Webhooks signed with HMAC-SHA256 and a timestamp, sent only to public https addresses
- Webhook delivery logs kept for 30 days, payloads only until delivered
- API request and error logs kept for 30 days, without document content
UU PDP
Personal data protection
How we handle personal data under the Personal Data Protection Law (UU PDP, Law 27/2022) and its implementing regulation.
- Roles
- For personal data in your documents you are the controller and we are the processor, acting on your instructions. Our commitments as your processor are written in the Terms of Service.
- Providers
- The providers that process data for us, and what each receives, are listed in the Privacy Policy. Some of them, such as the AI and email providers, may process data outside Indonesia. A new provider is announced before it starts.
- Incidents
- If a breach affects personal data, we notify you within 3 × 24 hours of becoming aware of it.
- Your rights
- Access, correction, deletion, a copy of your data and the other rights under UU PDP. The Privacy Policy explains how to use them.
Read more
The full details
Try it on your own documents
Sign in with Google and upload a document. The Free plan includes 30 AI credits a month and unlimited signatures.