Security

Last updated 26 October 2026

Your documents stay yours

Original files are stored encrypted in a private Google Cloud Storage bucket in the EU. Public access is blocked at the bucket level.
Files are uploaded straight from your browser or app to storage through short-lived signed links, and opened the same way.
Every request is checked against your workspace. People only see the shipments of workspaces they belong to.
Deleting a shipment deletes its files. Deleting your account deletes the workspace you own alone.

Documents are read through Anthropic's commercial API. Anthropic does not train its models on API customer data, and neither do we.

No passwords to steal: you sign in with a one-time code sent to your email.
Sessions can be ended at any time by signing out; deleting the account ends them all.
Payments are handled by Stripe. We never see full card numbers.

Found a vulnerability? Email hello@infinitelibrary.ai. We answer quickly and credit responsible reports.