Frequently asked questions
How Requester protects your documents: encryption, access, storage location and deletion.
- Every file encryptedAES-256, with its own key for each file.
- Hosted in EuropeEU servers and file storage.
- Deleted automaticallyAfter download, on the schedule you choose.
Security and encryption
7 questionsYes, in transit and at rest. Every connection uses HTTPS (TLS, with HSTS), including uploads and downloads, and emails are sent over TLS. Every file is encrypted with its own AES-256 key: the storage provider only holds encrypted data, never the keys. The keys are themselves encrypted with a master key kept apart from the files, and destroyed when the file is deleted. Uploads and downloads use signed links that expire within minutes.
No, and we prefer to say it clearly. Every file is scanned for viruses and its content is checked against its extension before it reaches you, which end-to-end encryption would prevent. Instead, your documents are protected by a separate encryption key per file, links that only the owner of the email address can open, download links valid for 5 minutes, and automatic deletion.
Only the owner of the email address the link was sent to. Opening a link requires a 6-digit code sent to that address (valid 10 minutes, 5 attempts) or signing in with that email. Codes are never sent to a typed address, so a forwarded or leaked email is not enough to see the documents.
Every link contains a random 256-bit token. We only store a hash of it, never the link itself in clear. Verification codes are stored hashed, limited in attempts and rate limited. Session cookies are HttpOnly and Secure; the sensitive ones are encrypted with AES-256-GCM.
Yes. Every uploaded file is scanned with ClamAV, with signatures updated automatically. Infected files are deleted immediately and shown as rejected. An answer can only be sent once every file is clean: if the scanner is unavailable, nothing is delivered. The content of each file is also checked against its extension, so a disguised file is rejected.
Not really: attachments stay in both mailboxes, get forwarded and are rarely encrypted end to end. With Requester the files are encrypted while stored, the link only opens after the recipient confirms their email, every file is virus-scanned and everything is deleted automatically.
A private upload link that only the intended person can open, with encrypted storage, a virus scan and automatic deletion. That is what Requester does: no attachments lying in mailboxes, no shared folder left open.
Data and privacy
5 questionsThe application and its database run on a server in an EU datacenter and files are stored in Cloudflare R2 with EU jurisdiction. Emails are delivered by Postmark (United States, under the EU-US and Swiss-US Data Privacy Framework); analytics run on PostHog EU servers.
Our admin tools only show metadata needed for support, such as email addresses, dates, file names and sizes. They never show messages, answers or file contents, and every admin action is logged. Server access is restricted to the operator, by SSH key only.
Hostinger (server, EU), Cloudflare (file storage in the EU, DNS), Postmark (email delivery, United States), Infomaniak (our support mailboxes, Switzerland), Stripe (payments, paid plans only), Google (optional sign-in) and PostHog EU (anonymous statistics; browser analytics only after your consent). The virus scanner runs on our own server: files are never sent to a third party for scanning.
No analytics cookies are set without consent. Without consent, we only keep anonymous counts for every request (hashed identifiers, no email address, subject, message, file name or IP address). Recipients never need an account.
No. Your documents and messages are only used to deliver your requests. They are never sold, shared for advertising or used to train AI models.
Retention and deletion
3 questionsFiles are deleted automatically after the first download: 7 days later on Free; on Pro and Team you choose from 1 day to 1 year (30 days on Pro and 60 days on Team by default). Answers never downloaded are deleted after 30 days on Free, 90 days on Pro and 180 days on Team. Unanswered requests expire and are deleted too.
Files, messages, email addresses, subjects and links. The encryption key of each file is destroyed too, so no copy of a file can be read again. Only anonymous statistics remain, such as dates, number of files and total size. Short-term database backups made before updates are deleted within 30 days; files are never kept in backups.
Yes, from your profile page. Your account, sign-in methods, picture and logo are deleted at once. Requests already sent run until their normal expiry, then are deleted. Before that, you can download all your data from the same page.
Accounts and teams
4 questionsThere are no passwords to steal: you sign in with a one-time link sent to your email, or with Google, which applies your Google two-factor settings. Dedicated two-factor authentication and SAML single sign-on are not available yet. Contact us if your organisation needs them.
Organisations have owner, admin and member roles. Invitations expire after 7 days and can only be accepted by signing in with the invited email address. Every member can sign out their other devices from their profile.
Yes, on the Team plan. Owners and admins add their email server (SMTP) and sender address in Organisation → Email, send a test, then turn it on: requests, reminders, answers and invitations go out from your address, replies go to the member who sent the request. Without your own server you can still set the sender name ("Your firm via Requester").
Requester is built for the GDPR and the Swiss data protection law: the application, its database and the files stay in Europe (emails are delivered by Postmark, United States), only what is needed is collected, and everything is deleted automatically. A data processing agreement (DPA) is available on request. Every user can download all their data as a zip from their account page, and owners and admins the whole organisation.
Product
8 questionsA simple way to collect documents by email. You send a request, Requester reminds the recipient until they answer, and you download the files. Then everything is deleted.
List exactly what you need, explain why and give a due date, then make answering easy. With Requester you send one request by email with the named documents and a message; your client answers from a link without an account, and polite reminders go out automatically until they do.
No. The recipient confirms their email address with a one-time code and uploads the files from their browser.
Yes, on every plan. Attach a PDF to a document of your request and place signature, text, date or tick fields; your client fills and signs it in the browser, without an account, and the signed copy comes back with the answer. It is a simple electronic signature (the signature is added to the PDF as an image). For documents that legally require a qualified electronic signature, use a dedicated signature provider.
Yes. On the Pro plan, keep them in a document library, PDFs with their fill & sign fields, and attach them to any request in one click. On the Team plan, the organisation shares a library managed by owners and admins.
Up to 2 GB per answer on Free, 20 GB on Pro and 50 GB on Team, and up to 200 GB with storage packs. Uploads are resumable after an interruption.
Send a request: the sender uploads straight to it, and interrupted uploads resume. The free plan accepts 2 GB per answer, Pro 20 GB, Team 50 GB and up to 200 GB per answer with a storage pack.
Those tools move files. Requester gets an answer: you list the documents you need, the person is reminded automatically until they reply, can add a message, and files are virus-scanned and deleted after download.
Another question?
Write to us. Security questionnaires are welcome.