Encrypted connections
Every connection uses TLS. Insecure requests are redirected to HTTPS, and browsers are instructed to keep using secure connections.
Security & privacy
Your documents deserve protection.
DocSolved is built for business documents you need to trust: invoices, contracts, and records that may contain personal or financial data. This page explains how we protect them in transit, at rest, and in your account.
Chiffrement au repos
The database and stored document objects are encrypted at rest by our hosting and storage providers. We do not add a separate application-level encryption layer on top.
No model training
Your documents and extracted data are not used to train AI models, by us or by our AI providers under their API terms.
What happens to a document
-
Upload You send a PDF or image over HTTPS. If you do not save the analysis, processing stays in memory for that request.
-
Extraction OCR and AI field extraction run on subprocessors listed on our legal page, including OpenAI (United States) or OVH AI Endpoints (European Union) as configured. You review and confirm results before relying on them.
-
Store (optional) When you save to History, results and optionally the file are kept under your account with owner-scoped access.
-
Supprimer Delete any record or your full history at any time. Account deletion removes your saved data and related artifacts.
Data privacy
- Nous n'utilisons pas vos documents ou données extraites pour entraîner des modèles d'IA.
- Application logs and error monitoring are configured to avoid document content, extracted values, and OCR text.
- Share links are explicit, expiring, and revocable. Workspace documents are visible only to workspace members.
- Subprocessors, regions, retention, and international transfers are documented on the legal page and in our privacy policy.
- EU-only AI processing is not currently offered; see Data Trust on the legal page for how AI and storage locations are described.
Access and authentication
Sign-in
User authentication is handled by a dedicated identity provider; DocSolved never stores your password.
Clés API
API keys are random tokens stored only as a hash, scoped, shown once at creation, and revocable immediately.
Isolation des locataires
Saved analyses and stored files are namespaced to your account or workspace. Stored files are reachable only through short-lived, owner-scoped links.
En-têtes de sécurité
Strict content security policy, frame denial, nosniff, and same-origin policies help reduce common web attacks.
Questions fréquentes
Utilisez-vous mes documents pour entraîner des modèles d'IA ?
No. Your documents and the data extracted from them are not used to train AI models. AI providers we use exclude API request data from model training under their API terms.
Where is my data stored?
Application hosting and the database run in the European Union. Saved files use cloud object storage that may hold data in multiple regions worldwide. Details and subprocessors are listed on our legal page.
Combien de temps mes données sont-elles conservées, et puis-je les supprimer ?
Documents you analyze without saving are not written to your history. Saved analyses stay until you delete them, subject to any retention period configured for your deployment. You can delete individual records or everything from the app at any time.
How do I report a security issue?
Email [email protected]. We aim to acknowledge within 72 hours. Please do not disclose publicly until a fix is available. The same contact is published in /.well-known/security.txt.
Questions or a vulnerability report?
For security research or incident reports, contact us directly.
Policy: security.txt · Detail: Legal security section