Yes. Every file is scanned by:

1. ClamAV antivirus (3.3M+ signatures).
2. VirusTotal hash check (70+ engines) as second opinion.
3. Files flagged as malicious are auto-deleted before any DB record.

Document viewer shows "Scanned by ClamAV" badge.