We built Impactex on infrastructure we trust for our own data. Here's exactly what that means for yours.
Every request between you and Impactex travels over HTTPS. No exceptions — not the app, not the API, not file downloads.
Your PDFs, logos, and signatures are stored on Cloudflare R2 — the same infrastructure that powers a significant chunk of the internet. Files are served via access-controlled URLs, not open buckets.
Sign in with Google OAuth 2.0. Impactex never handles or stores your Google password — authentication happens entirely on Google's side.
Your login session is managed via httpOnly cookies — inaccessible to JavaScript and protected against common session-hijacking attacks.
When you share a document, we generate a token-based link — not a direct URL to the file. You control access. We don't expose raw storage paths.
Documents, contacts, and company data are scoped to your account. We don't use your trade data to train models or share it with third parties.
Trust is earned, and we don't take yours lightly. We built Impactex on industry-leading infrastructure, prioritizing the security and privacy of your most critical trade documents. We maintain a careful, secure architecture and never compromise on the things that matter. Your data is protected by the same standard of care we demand for our own business.
If you spot a vulnerability or have a security concern, email us directly. We'll respond within 48 hours.
Report a Vulnerability →