SquirrelDocs is a pass-through, not a permanent vault. Files move from your client to you through SquirrelDocs, and then they are deleted on the schedule you choose: 30, 60, or 90 days. You set the window per firm. When deletion happens, you can get a Deletion Certificate confirming it.
Before a client uploads anything, you can send them our Pre-Link Trust Sheet — a plain-English one-pager, in your firm's name, explaining what the link is, what happens to their files, and when files are deleted.
Every upload generates a Chain-of-Custody Receipt: who uploaded, what file, for which period, and when. You and your client see the same record.
On SOC 2 — our honest line: SquirrelDocs is not yet SOC 2 certified. We run SOC 2-aligned controls on audited infrastructure, and we will tell you exactly which controls are in place today if you ask by email. We will not dress that up as certification.
Email Us for the Security Packet
The packet: data flow diagram, retention/deletion policy, sub-processor list, Trust Sheet sample.
SquirrelDocs