DocRenewal is committed to protecting your data and meeting industry security and privacy standards.
DocRenewal is hosted on Railway, a SOC 2 Type II and SOC 3 certified platform. Railway maintains a Trust Center where security reports and documentation are available upon request. Data is primarily processed and stored in the United States.
DocRenewal uses the following security measures:
Our infrastructure provider, Railway, is SOC 2 Type II certified. DocRenewal is built on this foundation and follows security best practices aligned with SOC 2 principles: security, availability, confidentiality, and privacy.
DocRenewal is designed to support GDPR compliance. We provide a Data Processing Agreement (DPA) upon request for customers who process personal data of EU residents. Users can request data access or deletion in accordance with applicable privacy laws.
We retain customer data only for as long as necessary to provide the service or as required by law. Upon account closure or request, data is deleted according to our retention policy.
We maintain incident response procedures. In the event of a security incident affecting customer data, we will notify affected customers in accordance with applicable laws and our contractual obligations.
Access to customer data is limited to authorized personnel on a need-to-know basis. Third-party vendors are reviewed for security practices and required to meet data protection standards.
For compliance questions, DPA requests, or security documentation, contact: [email protected]