Privacy
Privacy policy
Built to look at sensitive documents without keeping them.
Controller
Sooma.com Web Services, Lda., Matosinhos, Portugal. Contact: support@sooma.com.
Files you upload
- They are sent over an encrypted connection (HTTPS) to a server in Portugal and processed in memory only.
- They are not written to disk, copied or used for anything other than the validation you requested. They cease to exist when the result is returned to your browser.
- We do not log the content, file names, email addresses or any other document metadata.
- The result is shown only in your browser and is not stored on the server.
Requests to third parties during validation
To check whether a certificate has been revoked, the validation engine may contact the OCSP or CRL services of the certificate authority that issued it, and it periodically downloads the trusted lists published by the European Commission and the Member States. Those requests identify the certificate (serial number), never your document or your IP address.
Technical logs
Like any web server, we keep access logs (IP address, date and time, page requested, browser) for a limited period, for security and abuse prevention. They are not used for profiling or shared with third parties, unless required by law.
Cookies and third-party services
We use no cookies, analytics, advertising, external fonts or third-party content. The site makes no requests to other domains from your browser.
Legal basis and rights
Processing is based on your validation request and on the legitimate interest in keeping the service secure (Article 6(1)(b) and (f) GDPR). You may exercise your rights of access, rectification, erasure, restriction and objection through the contact above, and lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados.
Last updated: October 2026.