Security & Privacy
Docspeed is designed for production document workflows that need explicit, reviewable outputs.
Recommended customer posture
- Send bearer tokens only from trusted server-side environments
- Store API keys in a secret manager
- Sanitize logs before sharing with third parties
- Use async jobs for workloads that need durable tracking
Product posture
- The public docs cover only the hosted customer API contract
- Grounding is a first-class part of the product story so reviewers can verify source evidence
- The changelog is the canonical place to track public contract changes