RON Security

How Documents Are Secured in NotaryCentral RON

Notarized files are locked in a secure digital vault and opened through expiring, temporary access links instead of risky public URLs.

Updated May 15, 20263 min read

NotaryCentral RON is designed to keep completed notarized documents completely safe and private. Instead of sending sensitive files over email or hosting them on public links, we lock them in a secure digital vault. When an authorized notary or signer needs to view a file, they are given a temporary, expiring key to open it.

The document is locked in a secure vault

When a Remote Online Notarization (RON) session is finalized, NotaryCentral securely saves the completed, tamper-evident PDF into an encrypted private storage system.

The permanent record is never a reusable public URL. The document itself is isolated, and the URL someone clicks is just a temporary, tightly controlled gateway to reach that file.

When an authorized person asks to view or download a notarized document, NotaryCentral generates a special link just for that moment. By default, this download link expires after 15 minutes.

This short lifetime is critical because links often get copied into email threads, browser histories, chat messages, or support tickets. If an old document URL is ever found later by an unauthorized person, it will no longer work.

Notaries can always access their documents

Notaries do not need to save old download URLs or worry about them expiring. From the appointment dashboard or their notarized documents area, the notary simply clicks View, Review, or Download. Behind the scenes, NotaryCentral instantly verifies their authorization and generates a brand new secure link for them to use.

Signers have a simple, renewable access page

Signers receive a secure portal link rather than the raw PDF file. When they open their access page and click Download document, NotaryCentral creates a fresh, short-lived download link at that exact moment.

The signer's access portal itself is also protected by a time limit (defaulting to 30 days). If a signer takes longer to open their document and their portal access expires, they can click Request a new access link, which securely routes a fresh portal link back to their verified email inbox.

Why this is safer than emailing the PDF directly

This temporary-link approach drastically reduces the risk of common data exposure problems:

  • No permanent keys: An old email with a direct document URL does not remain a permanent key to the notarized PDF.
  • Dead links: A copied or forwarded URL stops working after the short expiration window closes.
  • Controlled access: Notaries create fresh links from inside their authenticated workspace, guaranteeing only logged-in professionals can retrieve the files.
  • Renewable access for signers: Signers can safely request new access when needed instead of keeping one forever-valid document link sitting in their inbox.

Under the hood: Technical implementation

For IT teams, security auditors, or technically curious notaries, here is how the platform achieves this architecture:

  • AWS S3 Backend: Notarized PDFs are saved to AWS S3 private buckets. NotaryCentral tracks storage metadata (bucket, object path, content type, upload timestamp, and cryptographic document hashes) in the primary database to accurately map files to signing records.
  • Pre-signed URLs: The short-lived links are natively generated AWS pre-signed URLs. The NotaryCentral backend authenticates the user's request, evaluates permissions, and signs the AWS request with a 15-minute Time-To-Live (TTL).
  • High-Entropy Access Tokens: Signer portal links utilize high-entropy cryptographic tokens. To prevent database exposure risks, NotaryCentral only stores one-way hashes of these tokens. The system natively limits token request rates and enforces strict expiration policies for both the portal token and the subsequent S3 pre-signed URL.

Managing documents during the session

Document security also extends to how files are handled inside the live signing room. Before a document is finalized and locked in the vault, notaries use specialized tools to prepare the file:

In short: NotaryCentral stores notarized RON documents privately, generates 15-minute download links on demand, and ensures both notaries and signers have a simple, renewable way to safely access their files.

Curious about storage limits? Read our guide on Data Storage Volume & Limits.