Filing for a company means handling passports, tax ID numbers and financial records. BorderlessFilings protects them with encryption, private storage, strict access checks and automatic deletion after your order is complete. This page explains each measure in plain terms, what we will never ask you for, and how to report a security concern.
How your documents are protected
- Uploads only through the portal. Documents are uploaded over an encrypted HTTPS connection to your private portal, never by email or chat. Only common document formats are accepted (PDF, images, Word, Excel and CSV files).
- Encrypted at rest. Every file is encrypted with AES-256-GCM before it is written to disk. The answers you give in the intake form, which can include tax ID numbers and dates of birth, are encrypted the same way.
- Private storage. Encrypted files are kept in a private folder outside the public part of the website wherever our host allows it. Where it does not, the folder is locked so it cannot be opened from the web. Stored file names and locations are never shown in links.
- Checked downloads. Every download goes through a check that you are signed in and that the document belongs to your account. A link copied from your portal does not work for anyone else.
- Limited access for our filing partner. Our filing partner sees only the order it is working on, through a secure link that is tied to that order, expires after a set number of days and can be switched off by us at any time.
- Automatic deletion. Documents you upload are deleted automatically a set period after your order is completed (30 days unless we tell you otherwise). Documents we deliver to you, such as certificates and filed forms, stay in your portal so you can download them again, and you can ask us to delete them.
How your account is protected
- Passwords are stored only as one-way hashes, so nobody at BorderlessFilings can read them. Password reset links expire after one hour, and changing your password signs out devices where you chose to stay signed in.
- Rate limits slow down repeated sign-in attempts and other automated abuse.
- Session protection. Sign-in cookies are marked secure and HTTP-only, and every form on the site is protected against cross-site request forgery (CSRF).
- Two-factor authentication for our admin. The admin area that manages orders requires a password and a one-time code from an authenticator app.
- Activity records. Sign-ins and sensitive actions, such as creating a partner link or changing a password, are logged so we can investigate anything unusual.
Payments and privacy
- Card payments are processed by PayPal. We never see or store your full card number. If we add Stripe later, the same applies.
- For bank transfer, Wise and Payoneer payments, we record only the amount, date and reference we need to match your payment.
- Our site analytics are built into our own system and use no cookies. They count page views without storing IP addresses. See our privacy policy for details.
- Emails about your order tell you that something has changed and link to your portal. They never contain your documents.
What we will never ask for
We will never ask you, by email, WhatsApp, phone or any other channel, for:
- your BorderlessFilings password or a sign-in code;
- your full card number or card security code;
- passwords or sign-in codes for your bank, PayPal, Wise, Payoneer, IRS, Companies House or HMRC accounts;
- your passport, ID or tax documents sent as email or WhatsApp attachments. Documents are only ever uploaded through the portal.
If someone claiming to be us asks for any of these, do not reply. Sign in to your portal directly by typing our address into your browser, and check there whether the request is real. You can also forward the message to support@borderlessfilings.com.
How you can help
- Use a strong password that you do not use on any other site.
- Do not choose "keep me signed in" on a shared or public computer, and sign out when you finish.
- Check that you are on our website before you enter your password.
- Upload clear copies of only the documents we ask for.
Report a security concern
If you think you have found a security problem on our site, or you received a suspicious message that uses our name, email support@borderlessfilings.com with "Security" in the subject. Describe what you found and how to reproduce it, but do not include anyone's personal data or documents. We will confirm that we received your report and let you know what we are doing about it. Please give us a reasonable time to fix a problem before you share details publicly, and do not access, change or delete data that is not yours while testing.
No system is perfectly secure, and we keep reviewing these measures as our service grows. If anything happens that puts your personal data at risk, we will tell you and the relevant authorities where the law requires it.