Security & Compliance

ShareAndGo is built for documents that matter, tax audits, due diligence, M&A. Here's exactly how we protect them: Singapore data residency, strong encryption, a tamper-evident audit trail, and access controls you actually control.

Your documents never leave Singapore

Every document, database record and backup lives in Google Cloud's Singapore region (asia-southeast1), and document content, including all AI search and OCR, is processed entirely in Singapore. Your documents never leave the country: the clear answer to data-sovereignty questions from regulators and your own clients. (Limited operational metadata for email delivery uses vetted subprocessors, see the FAQ below.)

Encrypted at rest and in transit

Documents are encrypted at rest with AES-256 (Google-managed keys) and in transit with TLS 1.2+. Documents open in the viewer, not as download links, unless downloads are turned on for the room.

Tamper-evident audit trail

Every view, share, access and change is written to a SHA-256 hash-chained audit log, each entry is cryptographically linked to the one before it, so any after-the-fact edit is detectable. The full trail is exportable for a regulator or a court.

Granular access control

Email-verified guest access, role-based permissions (viewer, viewer-no-download, editor, sub-admin), per-link expiry, and instant revocation. Invitees only ever see the room you put them in, nothing else.

Document protection

View-only mode disables downloads, printing and copy. Dynamic per-viewer watermarking stamps each page with the recipient's identity, and spreadsheets render in the browser so an .xlsx never lands on the recipient's disk. Screenshot deterrence blurs content when the window loses focus.

Account & session security

Two-factor authentication (TOTP) is supported for sensitive workspaces, sessions time out bank-style after inactivity, and every sign-in and access event is IP-logged. Authentication runs on the MyAndGo platform with enforced password and 2FA policy.

Security FAQ

Is ShareAndGo secure?

Yes. Documents are encrypted at rest (AES-256) and in transit (TLS 1.2+), every action is recorded in a SHA-256 hash-chained tamper-evident audit log, access is role-based and email-verified, and the inline viewer prevents downloads with per-viewer watermarking. Your documents are stored and processed in Singapore (asia-southeast1).

Where is my data stored?

In Singapore, Google Cloud's Singapore region (asia-southeast1). Your documents, database and backups are stored and processed in Singapore.

How does ShareAndGo handle privacy?

Your documents and their contents are stored and processed in Singapore. Limited operational metadata, such as the email address used to deliver an invitation, is handled by vetted subprocessors (e.g. SendGrid) that may process it overseas; these are disclosed in our privacy policy.

Does any of my data leave Singapore?

Your document content never does, files, their extracted text, and all AI search/OCR stay in Singapore (asia-southeast1). The only data processed overseas is limited operational metadata needed to deliver email (SendGrid), for example a recipient's email address, never the documents themselves.

Can the audit trail be trusted in a dispute?

Yes. The audit log is SHA-256 hash-chained: each entry includes a hash of the previous entry, so the record cannot be silently altered after the fact. It is exportable for regulator or court submission.

Can recipients download or copy documents?

Not in view-only mode. Documents are streamed through the inline viewer with downloads, printing and copy disabled, dynamic watermarking, and screenshot deterrence. You choose per-role whether a given user can download.

We do not currently hold SOC 2 or ISO 27001 certification; if your procurement needs them, talk to us about the roadmap.

Share sensitive documents with confidence

Start free, no sales call. Your documents stay in Singapore from the first upload.

Create a secure data room

See also

Explore ShareAndGo

Other comparisons

Use cases

By industry

Browse all