Security & privacy
Client work deserves clear boundaries.
Understand who can open a file, what a guest link permits and what happens when access ends. These are the controls implemented in Sensra, with their practical limits.
01
Private files, checked access
Original uploads and generated PDFs use private storage. The server checks file and workspace permissions before issuing access. Database row-level security also scopes workspace data.
02
A boundary around guest reviews
A guest link reaches one file with view or comment permission. It expires, can be revoked and does not grant workspace membership. Guest tokens are hashed; review sessions use HttpOnly cookies.
03
Short-lived download links
Authorized downloads use signed URLs that expire after 60 seconds. Revoking membership or a guest link stops new authorized requests; an already-issued URL can remain usable until it expires. Downloaded copies cannot be recalled.
04
Originals kept separate from processing
Office conversion stores a separate PDF for review while preserving the original version. Supported uploads are checked by content and format, with a 10 MiB per-file limit. Macro-enabled Office formats are not supported.
05
Roles for workspace access
Owners, admins, members and viewers have different permissions. Workspace invitations and membership govern team access; private realtime channels are scoped to authorized file versions.
06
Optional AI and OCR
These tools require an explicit request, plan allowance and configured provider. The required source material is sent to that provider. They are in early access. Read the privacy policy before using sensitive content.
Useful limits, stated plainly.
Sensra does not claim SOC 2 certification, end-to-end encryption, guaranteed uptime or independently audited security. Our automated tests check workspace isolation and permissions; they don't replace an independent security assessment.
Keep guest links out of public channels, choose an appropriate expiry and only invite reviewers who should see the file. A guest display name is not proof of identity.
Report a concern
Signed in? Contact Support from your workspace. Not a customer? Use the contact form. Include the affected route and a description. Please do not include passwords, live guest links, private documents or payment details.