How we handle your documents

Last updated: 2026-09-23

You may attach files to your intake — for example test reports, certificates, technical files or safety data sheets. This page describes what happens to them. The controller is AFINA, spol.s r.o.; see the Privacy Policy for details.

Upload and scanning

Files are uploaded from your browser to our servers in the EU using a short-lived upload link. Only document and image formats are accepted (PDF, PNG, JPG, DOCX, XLSX, TXT, CSV, up to 50 MB); executables, archives and macro-enabled Office files are rejected. Files are not automatically virus-scanned — please upload only files you trust; they are reviewed by the AFINA expert on your case.

Who can see them

Only members of your organization and the AFINA experts assigned to your case. Access is checked on every request, and downloads use short-lived links. Uploads, quarantines and access to documents are written to an audit log. Your documents are never shown to other clients.

What we use them for

Solely to prepare your assessment. We do not sell or publish your documents, and we do not use them to promote services to you. Uploaded files are never sent to an AI provider — the AI helper only sees the answers you type into the intake form, and only the fields listed in the Privacy Policy.

Confidentiality

Everyone at AFINA who works on your case is bound by confidentiality obligations, and your documents are used only to prepare your assessment.

Retention and deletion

Uploaded documents are kept as part of the assessment record for 5 years from submission, to support warranty, regulatory and dispute-resolution obligations. To request earlier deletion, write to privacy@eucertify.eu.

Storage location

Uploaded files are stored on infrastructure operated by WEDOS Internet, a.s., located in the Czech Republic (European Union). See the Subprocessor List for our other service providers.

What not to upload

Please do not upload passwords or secrets, or personal data of third parties. Files that look like medical or health records are rejected automatically at upload — we do not yet have an approved legal basis for processing health data, so this applies regardless of whether you believe it is necessary for your assessment. If a file is rejected in error, write to support@eucertify.eu.