How we handle your files

Where they are stored

Files uploaded to this portal, and files sent through the forms on taggedright.com, are stored in Cloudflare R2 object storage (our bucket was created with Cloudflare's North America location hint). Portal records, such as file names, statuses, dates and the audit log, are stored in Cloudflare D1. Cloudflare encrypts stored files and the portal only accepts HTTPS connections.

To do the work, TaggedRight also keeps copies on its own work computers: the originals, the remediated files, the reports, and the review notes for each project.

Outside services that process them

• Cloudflare hosts this portal and taggedright.com, stores the files and records described above, and protects the staff area (Cloudflare Access) and the website forms (Turnstile).
• Anthropic. To draft descriptions of images, read scanned pages, and check form fields, our software sends page images, image crops, the text on and around them, and form field lists to Anthropic's AI service. A person at TaggedRight reviews the results before a file is delivered. Anthropic's own terms govern how its service handles what it receives.
• Resend sends the portal's sign-in links and delivery notices (file names and links, not the files), and the website forms' messages to us, including any files attached to a free-sample request.
• Our business email (Microsoft 365) receives those form messages and attachments, and any documents you email us.

We use your documents only to do your work. We do not sell them and do not share them with other clients.

Who can see them in the portal

• The users at your organization that TaggedRight has invited. Each person signs in with a one-time link sent to their own email address.
• TaggedRight staff, who sign in through Cloudflare Access, and TaggedRight's desktop software, which uses a revocable access token.
• There are no public links: a file is served only to a signed-in user of your organization or to TaggedRight.

How long we keep them

• Delivered documents. By default, the original, the remediated file and its PDF version are deleted from the portal 90 days after the document is marked Delivered. Your organization's period may be different: a set number of days, or no automatic deletion if you asked us to keep files until you tell us otherwise. The delivery email states the period that applies to you. A daily job carries this out and records each deletion in the audit log. A before-and-after report is deleted once every document it covers has been deleted.
• Documents that were never delivered, for example a file that failed or is still in progress, and other files such as the "Where to post the new files" lists, are kept until you or TaggedRight remove them.
• Files sent through the website forms are kept in the portal until TaggedRight deletes them, and in our email until deleted there.
• Records (file names, statuses, dates and the audit log) are kept after the files are deleted, so the history stays intact.
• Copies on our work computers are not deleted automatically. Ask us and we will delete them.

Download what you need to keep before the portal period ends.

Audit log

The portal records who uploaded, downloaded, changed or deleted each file, and when. Your organization's audit log is available on request. Email [email protected] and we will send it as a spreadsheet.

Your choices

You can ask us at any time to delete your organization's files (in the portal and on our computers), export them, or change the retention period. We aim to act on those requests within two business days. Keep in mind your own records-retention duties: deleting our copies does not affect the copies you hold.

This page was last reviewed on October 7, 2026.