How we handle your files

Plain answers about where your documents go when you upload them to this portal, who can reach them, and when they are deleted.

Where they are stored

Files you upload are stored in Cloudflare R2 object storage in the United States. Portal records, such as file names, statuses and dates, are stored in Cloudflare D1, also in the United States.

Encrypted at rest and in transit

Every file is encrypted at rest by Cloudflare and travels only over HTTPS. Uploads and downloads never pass through a third-party service.

Who can see them

  • The users at your organization that TaggedRight has invited to this portal. Each person signs in with a one-time link sent to their own email address.
  • TaggedRight staff, who sign in through Cloudflare Access with their TaggedRight accounts.
  • Nobody else. Files are never public, never indexed, and never shared with other clients.

How long we keep them

Originals, remediated files and reports are deleted automatically 90 days after a document is marked Delivered, unless you ask us to keep them longer or delete them sooner. Download what you need before then. An automated job runs every day to carry this out and records each deletion in the audit log.

Documents that were never delivered, for example a file that failed, are kept until you or TaggedRight remove them.

Audit log

The portal records who uploaded, downloaded, changed or deleted each file, and when. Your organization's audit log is available on request. Email [email protected] and we will send it as a spreadsheet.

Your rights

You can ask us at any time to delete your organization's files, export them, or change the retention period. We act on those requests within two business days.

This page was last reviewed on September 15, 2026.