Always encrypted
Encrypted connections and, if you keep files, AES-256 encryption with a separate key for each account.
Security
Security and compliance, explained without the fine print.
Encryption at every step, servers in the EU, a record of every review decision and a data processing agreement with CCPA/CPRA service provider terms, ready to download.
Clear infrastructure
Our servers are in Spain and any stored data stays in the EU. The AI analysis runs on Cloudflare Workers AI, called only from our servers, which doesn't keep documents or train on them.
Audit trail
Every review decision is recorded with who made it, when and why.
Service provider under the CCPA
We act as your service provider: we don't sell or share personal information, we keep the minimum data and no copies by default.
Access controls
Team roles
Owner, admin and developer, each with its own permissions.
Separate keys
Test and live keys, plus publishable keys limited to your domains.
Signed notifications
Every notification we send to your system is signed so you can confirm it came from us.
Documentation for your legal team
- Data processing agreement (DPA)Downloadable, with CCPA/CPRA service provider terms and the list of subprocessors. On the Enterprise plan, signed and tailored to you.
- Published subprocessorsIONOS (servers in Spain), Cloudflare (AI analysis, and storage in the EU if you turn it on) and Stripe (payments). Depending on your processing profile, European providers such as AWS in Frankfurt, Google Cloud in the EU or Mistral.
- Privacy policyWhat we process, why and for how long.
- What we don't doNo biometrics, and we don't certify that a document is authentic. We give you signals so you can decide.
Frequently asked questions
Where are documents processed?
Our servers are in Spain and any data you keep is stored in the EU. By default, the AI analysis runs on Cloudflare Workers AI on its network, which doesn't keep documents or use them for training. By default no copy of the document is kept either.
Can you sign our data processing agreement?
On the Enterprise plan we sign a custom DPA. On other plans, you can download ours.
What happens if there's a security incident?
We notify you without undue delay, as set out in the DPA, so you can meet your own notification obligations.
And for the record…
Create your free account and validate your first document in five minutes. No credit card required.