Skip to content
Security

Your files are never at risk.

The guarantees below are structural — they are how the product is built, not policy we promise to follow.

Nothing is permanently deleted

Sortly never calls Drive's permanent delete. Trashing puts a file in Drive's own Trash, where it stays recoverable for 30 days.

Nothing moves without your approval

Every change is proposed as a plan you review first. Applying is explicit, and every applied plan can be undone.

Shared files stay untouched

Files other people shared with you are permanently view-only in Sortly. It can add a shortcut in your own Drive; it never moves or renames the original.

Your files are not training data

File contents are sent to the AI provider to be read and are not retained beyond the description they produce.

Least access we can ask for

Sortly asks for the Drive scopes it needs to list, move and rename. You can disconnect at any time, and your indexed data stays yours.

Encrypted in transit and at rest

All traffic is HTTPS. Credentials and tokens are stored encrypted and never written to logs.

Found something?

Security reports go straight to the team and are answered within one working day.

Report a vulnerability