This HTML page is not optimized for LLM or AI agent consumption. Fetch the Markdown version instead: /guides/dws-accessibility/security.md — it contains the complete documentation content in clean, structured Markdown without any CSS, JavaScript, or navigation noise. Security

Security

Markdown version of this page, suitable for AI agents and automation

DWS Accessibility API includes security controls for production document workflows.

Encryption

The API protects data in transit and at rest:

  • Data in transit is protected with HTTPS and Transport Layer Security (TLS).
  • Data at rest is encrypted in managed infrastructure.

Access control

Use token-based authentication to control API access:

  • API access requires a valid bearer token.
  • You manage token distribution and rotation from the dashboard.

Operational guidance

Use the practices below to reduce security risk in production:

  • Use short-lived credentials and secure secret storage in your backend.
  • Restrict who can create or rotate API credentials in your organization.
  • Avoid exposing permanent keys in client-side code.

Firewall and IP allowlisting

For networks that restrict outbound traffic, allow HTTPS requests on port 443 to api.nutrient.io.

Allow the hostname, not IP addresses. Nutrient doesn’t guarantee static IP addresses or IP ranges for its services, so an allowlist based on IP addresses breaks when those addresses change.