All data transmissions are end-to-end encrypted, both in transit and rest. Documents aren’t stored for more than 24 hours during which time it’s protected by having a UUID of 40 characters.