Trust & Security Center
Security, compliance, and privacy controls at the core of HeyTLDR.
Our Security Pillars
Session-Scoped Isolation
Documents are cached temporarily during active sessions on server memory or secure local files, preventing any leakage.
VPC / Private Deploy
We offer custom virtual private cloud (VPC) deployments to ensure your financial and legal data stays fully local.
SOC 2 Alignment
Built in accordance with SOC 2 Type II trust and reliability frameworks to protect sensitive information.
Compliance & Ingestion Protocols
Our platform extracts metadata at page level using local Python libraries (PyMuPDF) and utilizes sliding-window TF-IDF vectors for context retrieval. No information is stored persistently beyond the scope required for user compliance and retrieval functions.
Model Safety
When routing documents through our failover tiers (Google Gemini 2.5 Flash, DeepSeek, and Mistral), zero data is retained by third-party model providers for model adjustment or secondary training purposes.