Security and retention

How NotaryCentral protects and retains client data

We take the security of your data and personal information very seriously. NotaryCentral is designed for notaries who handle sensitive client, signer, document, payment, and notarization records, so our retention practices are built around both operational access and notarial compliance.

Data transmissions between NotaryCentral services and your devices—whether computer, phone, or tablet—are encrypted with SSL/TLS. Sensitive account information is protected using encryption and access controls before it is stored by NotaryCentral or its service providers.

We do not sell your data, customer lists, or notarization records. We use customer information to provide the product, support your account, operate connected workflows, meet security obligations, and comply with applicable legal and regulatory requirements.

Digital Security Padlock

Where client data is retained

The exact data retained depends on which NotaryCentral features you use, but the platform generally stores records in the following places and systems.

Application database records

Customer profiles, signer details, appointments, invoices, notary journal entries, mileage, expenses, user settings, and related workflow records are retained in NotaryCentral's application database so notaries can operate their business and retrieve their records.

Document and media storage

Uploaded signing documents, notarized documents, imported paper journal images, and RON session recordings are retained in encrypted cloud object storage connected to the NotaryCentral platform. Access is limited to authorized application workflows and time-limited links where supported.

Identity and RON evidence

Remote online notarization workflows may retain identity verification results, biometric certificates, signing room events, participant activity, annotations, and recording metadata so the notary has a defensible audit trail for completed sessions.

Connected service data

When you connect services such as Google Calendar, Google Maps, Square, Stripe, or email integrations, NotaryCentral retains only the account, token, event, payment, or delivery data needed to provide the requested integration and troubleshoot related support issues.

Retention practices

  • Records are retained while an account is active so the notary can manage clients, appointments, journal entries, documents, accounting, and RON evidence.
  • Completed notarization, e-journal, and RON records may need to remain available for the period required by the notary's state rules, customer obligations, platform audit needs, dispute resolution, or other legal requirements.
  • Administrative records such as billing, payment, email delivery, support, audit, and security logs may be retained for business operations, fraud prevention, accounting, and legal compliance.
  • If you request deletion, we review the request against any notarization, RON, billing, fraud-prevention, or legal retention obligations before deleting or de-identifying eligible records.
  • The Extract from ID feature does not store the original ID image on NotaryCentral servers; extracted text is processed temporarily to return structured information to the app.

Security safeguards

  • Encryption in transit using SSL/TLS for data transmitted between your devices and NotaryCentral services.
  • Encrypted storage and restricted internal access for sensitive account and workflow information.
  • Authentication and authorization controls that limit access to account-specific records and connected workflows.
  • Cloud storage patterns that support private object storage, signed access links, and deletion workflows for eligible files.
  • Employee and support access expectations focused on safeguarding customer information and using data only for service, support, and compliance purposes.

Deletion and retention requests

Account deletion requests are reviewed so we can remove eligible personal information while preserving only what must be retained for notarial recordkeeping, RON audit evidence, billing, fraud prevention, security, dispute resolution, or legal compliance. When complete deletion is not legally or operationally appropriate, we limit retention to the required purpose and may de-identify or restrict access where feasible.