Security: how we handle your files
Delithius Labs LLC, Goldsboro, North Carolina. Questions: admin@delithiuslabs.org.
Where your files are stored
Files you upload travel over an encrypted HTTPS connection and are stored on our US-based web host, in a private folder outside the public web folder. Each file is fingerprinted with SHA-256 at upload, and the fingerprint appears in your engagement letter next to the file name. Limits: 500 MB per file and 2 GB per case.
Who can open them
The Delithius Labs team members working your case. We share your information with nobody else, except the services listed in our privacy policy (our web host, our email service, Stripe for card purchases of other products, our bank for wire matching) and where the law requires it.
Accounts and sign-in
Passwords are stored as one-way scrypt hashes. The sign-in cookie is marked secure and HttpOnly, lasts up to 7 days, and uses SameSite Lax. Sign-up, upload and the guide carry rate controls.
How long we keep it
Intakes that stay at the intake stage are set to be deleted after 90 days, with their files, and you can ask us to delete them sooner. Engaged and paid cases are kept as business and financial records for as long as tax and accounting laws require.
Confidentiality and NDA
Everything you send is treated as confidential. A mutual NDA is available on request: reply to your engagement letter, or write to admin@delithiuslabs.org.
The guide on this site
The guide runs on Amazon Web Services (Amazon Bedrock) in the United States. Your questions are sent to it to write a reply and are kept out of our logs; the guide does not see your uploaded files. Call requests you submit (name, email, phone, times, a note) are saved in an encrypted database on our AWS account so a person can reply.
What we do not claim
No system is perfectly secure, and we hold no security certification. If a breach affects your personal information, we will tell you as the law requires.