How is data protected between the user's device and the service?

All data transmissions are SSL encrypted. Documents aren't stored for more than 24 hours during which time it's protected by having a UUID of 40 characters.