Encrypted connections
Every connection uses TLS. Insecure requests are redirected to HTTPS, and browsers are instructed to keep using secure connections.
Security & privacy
Your documents deserve protection.
DocSolved is built for business documents you need to trust: invoices, contracts, and records that may contain personal or financial data. This page explains how we protect them in transit, at rest, and in your account.
Verschlüsselung im Ruhezustand
The database and stored document objects are encrypted at rest by our hosting and storage providers. We do not add a separate application-level encryption layer on top.
Training der Modelle
Your documents and extracted data are not used to train AI models, by us or by our AI providers under their API terms.
What happens to a document
-
Upload You send a PDF or image over HTTPS. If you do not save the analysis, processing stays in memory for that request.
-
Extrahieren OCR and AI field extraction run on subprocessors listed on our legal page, including OpenAI (United States) or OVH AI Endpoints (European Union) as configured. You review and confirm results before relying on them.
-
Store (optional) Wenn Sie im Verlauf speichern, werden die Ergebnisse und optional die Datei in Ihrem Konto mit Zugriff auf den Bereich des Eigentümers gespeichert.
-
Löschen Delete any record or your full history at any time. Account deletion removes your saved data and related artifacts.
Data privacy
- Wir verwenden Ihre Dokumente oder extrahierten Daten nicht, um KI-Modelle zu trainieren.
- Application logs and error monitoring are configured to avoid document content, extracted values, and OCR text.
- Share links are explicit, expiring, and revocable. Workspace documents are visible only to workspace members.
- Subprocessors, regions, retention, and international transfers are documented on the legal page and in our privacy policy.
- EU-only AI processing is not currently offered; see Data Trust on the legal page for how AI and storage locations are described.
Access and authentication
Sign-in
User authentication is handled by a dedicated identity provider; DocSolved never stores your password.
API-Schlüssel
API keys are random tokens stored only as a hash, scoped, shown once at creation, and revocable immediately.
Mandantentrennung
Saved analyses and stored files are namespaced to your account or workspace. Stored files are reachable only through short-lived, owner-scoped links.
Sicherheits-Header
Strict content security policy, frame denial, nosniff, and same-origin policies help reduce common web attacks.
Häufig gestellte Fragen
Verwenden Sie meine Dokumente, um KI-Modelle zu trainieren?
No. Your documents and the data extracted from them are not used to train AI models. AI providers we use exclude API request data from model training under their API terms.
Where is my data stored?
Anwendungshosting und die Datenbank laufen in der Europäischen Union. Gespeicherte Dateien verwenden Cloud-Objektspeicher, die Daten in mehreren Regionen weltweit speichern können. Details und Unterauftragsverarbeiter sind auf unserer rechtlichen Seite aufgeführt.
Wie lange werden meine Daten gespeichert, und kann ich sie löschen?
Documents you analyze without saving are not written to your history. Saved analyses stay until you delete them, subject to any retention period configured for your deployment. You can delete individual records or everything from the app at any time.
How do I report a security issue?
Email [email protected]. We aim to acknowledge within 72 hours. Please do not disclose publicly until a fix is available. The same contact is published in /.well-known/security.txt.
Questions or a vulnerability report?
For security research or incident reports, contact us directly.
Policy: security.txt · Detail: Legal security section