Doxzo is built so that sharing a document for printing never means giving away control of it. Here is how we keep your documents private, in plain language.
Every document on Doxzo sits behind your account. There are no open links, no public folders, and no guest access.
Your documents are stored in private storage, separate from any public access. Nothing is ever placed on a public URL or a shareable link.
Opening any document requires a signed-in account with the right to access it. Access is checked on every request, not just at the door.
Access is scoped by role: customers see their own documents, and vendors see only the document of the print job assigned to them, nothing more.
The moment the print job ends, the access ends with it.
The temporary 6-digit print code is valid only while the print job is active. It stops working the moment the job is completed or expires.
A vendor sees only the document for the job assigned to them, or the one job authorized by the code they entered. Other jobs and your saved documents are never exposed through the vendor app.
Temporary print documents are removed automatically after the job is completed or expires. Nothing lingers after the print.
The fundamentals, handled properly, so you never have to think about them.
All traffic between your device and Doxzo is protected with HTTPS/TLS encryption in transit.
Passwords are never stored in plaintext. Accounts are protected with industry-standard hashing and secure sessions that expire.
Uploaded files are validated before storage, with clear size and type limits. User filenames are never used as storage locations.
Document contents are never logged, never placed in URLs, and never returned in error messages.
Clarity matters as much as capability.
If you believe you have found a security issue with Doxzo, please email us. We take every report seriously and investigate each one.
