Encrypted in transit and at rest
Your files are encrypted the moment they leave your browser, using TLS 1.3 for the connection. Once they reach us, every file is encrypted at rest with AES-256-GCM — the same standard used to protect sensitive data across the industry. Extract.FAST encrypts your files in transit and at rest, and automatically deletes them about an hour after your extraction finishes.
A unique key for every file
No two files share an encryption key. Each one gets its own key, derived with HKDF-SHA256, so unlocking one file tells an attacker nothing about any other. The keys are held only as long as we need them and discarded once your extraction is done.
Decrypted only while we extract
We decrypt a file in memory only for the moment it takes to pull out the text, images, metadata, or media you asked for. The readable version is never written to disk — once the extraction finishes, only the encrypted copy remains, and that is deleted shortly after.
What this means for you
Your files sit on our servers in a form no one can read without the per-file key, and only for as long as it takes to run your job and let you download the results. After about an hour, the encrypted files are deleted and cannot be recovered.
Frequently Asked Questions
Is my file encrypted while it uploads?
Yes. The connection between your browser and Extract.FAST is encrypted with TLS 1.3, so your file is protected in transit, and it's encrypted again with AES-256-GCM as soon as it's stored.
Can anyone at Extract.FAST read my files?
No. Files are stored encrypted with a unique per-file key and are only ever decrypted in memory for the brief moment your extraction runs. We don't keep a readable copy on disk.
How long do you keep my files?
Your uploads and the extracted output are automatically deleted about an hour after the extraction finishes, and we keep no backups. Once deleted, they can't be recovered.