KorexaTech

Security

Last updated November 7, 2026

Our approach

KorexaTech products handle documents that matter to your business, so we keep the setup small, simple and locked down. We collect as little as possible and keep it for as short as possible.

This website

• Served only over HTTPS with modern TLS; plain HTTP is redirected and HSTS is enabled.
• A static site: no database, no login and no server code that can be attacked from the web.
• Strict security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy.
• No third-party trackers, analytics cookies or advertising scripts.
• Hosted on Cloudflare's global network with DDoS protection.

Your documents

• Used only to deliver the job you asked for.
• Never sold, shared with advertisers or used to train AI models.
• Deleted after delivery unless you ask us in writing to keep them.
• Sent to us by you; we never ask for passwords or access to your systems.

Accounts and access

• Every admin account is protected with two-factor authentication.
• Access is limited to the people who need it to deliver your job.

Reporting a vulnerability

If you believe you have found a security issue, email [email protected]. Please give us reasonable time to fix it before making it public. We do not take legal action against good-faith research that avoids privacy violations and service disruption.

Our security.txt file is published at /.well-known/security.txt.