Security & Trust Centre

Security You Can Trust

At Yeti Doc, trust is at the heart of everything we build.

Whether you're signing a single agreement or managing thousands of business documents, protecting your information is one of our highest priorities.

We continuously work to provide a secure, reliable, and transparent platform that individuals and organisations can confidently use every day.

Our Security Principles

Everything we build is guided by five simple principles.

🔒 Security by Design

Security is considered throughout the design and development of Yeti Doc rather than added later.

🔐 Privacy First

Your documents belong to you.

We never sell your personal information, and we only process your data to provide and improve the Yeti Doc Service, as described in our Privacy Policy.

👁 Transparency

We aim to clearly explain how Yeti Doc works, how your information is handled, and how we respond to security issues.

🚀 Continuous Improvement

Security is an ongoing process.

We regularly improve our systems, review risks, and update our platform to respond to new threats and technologies.

🤝 Shared Responsibility

Keeping your account secure is a shared responsibility.

We provide security tools and infrastructure, while users are responsible for protecting their passwords, reviewing documents before sending, and maintaining secure devices.

How We Protect Your Information

Yeti Doc uses a range of technical and organisational safeguards designed to protect customer information.

These safeguards may include:

Encrypted connections using TLS.
Encryption of stored information where appropriate.
Secure cloud infrastructure.
Firewalls and network protections.
Role-based access controls.
Authentication and account protection.
Regular software updates.
Security monitoring.
Logging and audit trails.
Disaster recovery planning.
Backup systems.
Infrastructure redundancy where appropriate.

Security measures continue to evolve as technology changes.

Account Security

To help protect your account, Yeti Doc may provide features such as:

Secure password authentication.
Multi-factor authentication (MFA) (available now or planned).
Session management.
Automatic session expiry after periods of inactivity.
Detection of suspicious login activity.
Email verification.
Password reset protections.

Users should also:

Use strong, unique passwords.
Avoid sharing login credentials.
Keep software and browsers updated.
Report suspicious activity immediately.

Document Security

Yeti Doc is designed to help keep your documents secure throughout the signing process.

Depending on the features you use, documents may include:

Controlled recipient access.
Secure document links.
Signature authentication.
Timestamped signing events.
Audit trails.
Download history.
Completion records.
Tamper-evident document records (where supported).

You remain responsible for selecting the correct recipients before sending documents.

Audit Trails

Every completed signing process may generate an electronic audit trail.

Audit trails may include:

Document creation.
Recipient invitations.
Email delivery.
Document views.
Signature timestamps.
Authentication events.
Device information.
Browser information.
IP addresses (where available).
Completion history.

Audit trails help demonstrate the history of a document but do not independently verify identity or guarantee legal enforceability.

Data Protection

Yeti Doc takes reasonable steps to safeguard personal information against:

Unauthorised access.
Loss.
Misuse.
Accidental disclosure.
Alteration.
Destruction.

We regularly review our security practices to maintain appropriate protection for customer information.

Availability & Reliability

We work to provide a reliable service that users can depend on.

While no online service can guarantee uninterrupted availability, we strive to:

Maintain high service availability.
Minimise downtime.
Respond promptly to incidents.
Perform planned maintenance during appropriate periods where practical.
Restore services quickly following unexpected interruptions.

Future uptime targets and service status information may be published as Yeti Doc grows.

Security Monitoring

To help protect the platform, Yeti Doc may monitor:

Authentication events.
Login activity.
Suspicious behaviour.
System performance.
Infrastructure health.
Error logs.
Security alerts.

Monitoring is designed to detect and respond to potential security incidents.

Responsible Disclosure

We appreciate responsible security research.

If you believe you have discovered a security vulnerability affecting Yeti Doc, please report it to us privately.

Please include:

A description of the issue.
Steps to reproduce the problem.
Screenshots (where appropriate).
Any supporting information.

We ask that you:

Avoid accessing data that does not belong to you.
Avoid disrupting our services.
Allow us reasonable time to investigate before publicly disclosing any vulnerability.

We are committed to reviewing responsible reports as promptly as reasonably practicable.

Security Contact
info@yetidoc.com (recommended)

Third-Party Providers

To provide our services, Yeti Doc may use trusted third-party providers such as:

Secure cloud hosting providers.
Email delivery providers.
Identity verification providers.
Payment processors (when available).
Customer support platforms.
Analytics providers.
Artificial intelligence providers (where enabled).

Each provider is selected based on factors including security, reliability, and suitability for the services they provide.

Privacy Commitment

Privacy and security work together.

Our Privacy Policy explains:

What information we collect.
Why we collect it.
How we use it.
When we share it.
Your rights.

We encourage all users to read our Privacy Policy alongside this Trust Centre.

Compliance

Yeti Doc is designed to support electronic signing and document management in accordance with applicable laws.

Depending on your location, this may include consideration of:

Australian electronic transactions legislation.
Privacy legislation.
International privacy frameworks.
Industry best practices.

Users remain responsible for ensuring that electronic signatures are appropriate for their specific documents and legal requirements.

Australian eSignature Compliance

Yeti Doc is built to support the requirements of the Electronic Transactions Act 1999 (Cth) and equivalent state and territory legislation:

Identity verification — every signer opens their document through a unique emailed signing link, with optional PIN protection for an extra layer of identity assurance.
Intention to sign — signers take a deliberate action to apply their signature; signing is never passive or accidental.
Consent to electronic transactions — every signer must explicitly accept an electronic-records consent before signing, and that acceptance is recorded.
Tamper-evident documents — completed documents are locked with a cryptographic hash, so any alteration after signing can be detected.
Complete audit trail — every completed document includes a Certificate of Completion logging timestamps, email addresses, IP addresses, and device details for all parties.
Corporate execution — multi-signer workflows allow company directors to each sign their own electronic copy, supporting split execution under the Corporations Act 2001.

We handle personal information consistently with the Australian Privacy Principles, and if a data breach occurs that is likely to cause serious harm we will notify affected users and the Office of the Australian Information Commissioner (OAIC).

Some documents (such as Wills, Powers of Attorney, and certain land dealings) may still require handwritten signatures or witnessing under state or territory law. Please confirm your document can be signed electronically.

Security is a Partnership

The best security outcomes happen when both Yeti Doc and our users work together.

We encourage all users to:

Keep passwords secure.
Enable multi-factor authentication when available.
Verify recipient information carefully.
Review documents before signing.
Report suspicious activity promptly.
Keep devices updated.

Contact Us

Questions about security?

We'd love to hear from you.

Yeti Doc

Our Promise

We know that your documents often contain sensitive personal, financial, legal, and business information.

Protecting that information is a responsibility we take seriously.

We are committed to continually improving the security, reliability, and transparency of Yeti Doc so you can focus on what matters most—getting documents signed with confidence.

End of Security & Trust Centre – Version 1.0

Yeti Doc Security & Trust Centre