Security at FinishMyDocs

Encrypted transfer

Every connection to FinishMyDocs — uploading a PDF, editing in the browser, downloading the finished file — is encrypted in transit with HTTPS/TLS. We do not serve any part of the application over unencrypted connections.

Private document storage

Documents you upload are stored outside the public web root, which means they are never reachable at a guessable URL. There is no public directory of files to stumble into; access goes through your authenticated account, and only you can see your documents.

Tokenized, expiring links

When you download a document or share it — including when you invite someone to e-sign — the link is generated with a unique random token and expires automatically. Links cannot be enumerated or reused indefinitely, and an expired link simply stops working.

Account protection

Passwords are stored only as salted hashes — never in plain text — and login attempts are rate-limited to slow down guessing attacks. Use a strong, unique password for your account; if you ever suspect unauthorized access, contact us right away.

Payments via Stripe

All payments are processed by Stripe, a PCI-DSS–certified payment processor used by millions of businesses. Your card number is sent directly to Stripe and never touches our servers — we never see or store it. We only receive the card brand and last four digits so you can identify your payment method in Dashboard → Billing.

Your controls

You stay in charge of your data. You can delete any document from your dashboard at any time, and you can cancel your subscription anytime with one click or one email — see how to cancel. Our privacy policy explains exactly what we collect and why.

Responsible disclosure

If you believe you have found a security vulnerability in FinishMyDocs, please email support@finishmydocs.com with the details. We take reports seriously, investigate promptly, and appreciate responsible disclosure that gives us a chance to fix issues before they are made public.