Small data. Short life. Strong controls.

Sada Files minimises collection, separates browser and assisted workflows, validates formats, applies fair-use limits, and uses short retention windows. Temporary file keys and objects have matching expiries.

Developer passwords use a one-way password hash. API keys are shown once and stored as token hashes with a visible prefix, scopes, expiry, revocation state, and last-used timestamp.

Assisted jobs use encrypted temporary storage, expire within 24 hours, and expose Delete now. Keep original files, inspect important outputs, and avoid submitting unnecessary sensitive information.

Email support@sadafiles.com with reproducible steps and impact. Do not access other people’s data, disrupt service, or publish exploitable details before we can investigate.