# DIREKT Secure Document Handling

## Collection

Request only category-required evidence. Explain purpose, visibility, retention and alternatives before upload.

## Client

- app-private temporary file;
- capture quality guide;
- no automatic public gallery copy;
- redact unnecessary data where approved;
- upload over TLS;
- progress/retry;
- cleanup after acknowledgement/retention.

## Server

- authorized upload session;
- MIME/signature/size validation;
- malware scan;
- random key/private storage;
- immutable evidence version;
- checksum;
- processing status;
- short-lived reviewer access;
- watermark where justified;
- no default download.

## Review

Access only assigned/authorized cases, audit open/view/export, hide unrelated fields and prevent copy into free-text notes.

## Public output

Only a derived claim and safe metadata. Never original file, identity number, signature, home address or reviewer notes.

## Disposal

Lifecycle deletion and backup propagation according to approved retention; legal hold documented.
