Security & Privacy

Your Data Belongs to You.

Your invoices, contracts, and personal documents belong to you - not me, not advertisers, not anyone else. Here is exactly what happens with your data.

100% Germany
Your documents never leave Germany. No US servers, no EU-somewhere. Frankfurt and Falkenstein, both ISO 27001 certified.
No AI training
Your content is never used to train AI models. Strict data processing agreements with all providers. No exceptions.
Delete means delete
Everything permanently deletable anytime. No hidden copies, no fine print. Your data, your decision.
Data Location

Your Data Stays in Germany. Always.

Not "EU region." Not "somewhere in Europe." Germany. Your files are stored in Frankfurt. For OCR and AI processing, the minimum required data is sent over encrypted links to Falkenstein and the results are stored back in Frankfurt. Both locations are live and stay in Germany.

Infrastructure powered by

Supabase
Amazon Web Services
Hetzner

Frankfurt

Germany

Auth, storage, edge functions

SOC 2 Type II Database & Auth

Falkenstein

Germany

API, document processing, embeddings

ISO 27001 Since 1997

Why Germany Matters

Germany has some of the strictest data protection laws in the world. Your data is subject to GDPR and German BDSG (Federal Data Protection Act). No US CLOUD Act. No surprise subpoenas. No selling your data to advertisers. Just serious privacy laws that actually protect you.

Data Journey

Follow Your Data, Step by Step

No mysterious "the cloud." Here's exactly what happens to your documents from the moment you sign up to the moment you search for them.

1

1. Registration

📍 Frankfurt (Auth) (Supabase)

You sign up with your email and password. That's it.

Security Details
Security:
TLS 1.3 encrypted connection, bcrypt password hashing
Data Stored:
Only email + hashed password
2

2. Document Upload

📍 Frankfurt (Storage) (Supabase)

You upload a document or forward an email. File goes straight to the Frankfurt datacenter.

Security Details
Security:
End-to-end encryption in transit, virus scanning
Data Stored:
Encrypted file in Supabase Storage (Frankfurt)
3

3. AI Processing

📍 Falkenstein (API Processing) (Hetzner)

OCR extracts text and the API processes documents in Falkenstein. Data moves from Frankfurt to Falkenstein over encrypted links and results are stored back in Frankfurt.

Security Details
Security:
Encrypted inter-datacenter transfer, strict privacy agreements, no training data usage
Data Created:
OCR text, metadata, AI analysis results
4

4. Secure Storage

📍 Frankfurt (Storage) + Replication (Both)

Your document and metadata are stored in Frankfurt and replicated across locations for resilience.

Security Details
Security:
AES-256 encryption at rest, automatic backups, access control
Data Stored:
Encrypted database records, file storage with checksums
5

5. Search & Access

📍 Frankfurt (Edge Functions) (Supabase)

You search for a document. Queries run through Frankfurt edge functions and databases. Only you can see your results.

Security Details
Security:
User-level access control, audit logs, session management
Data Accessed:
Only your documents, never shared with others

Want the Details?

Everything You Need to Know

Ready for Secure Document Management?

Start today and experience how simple secure document management can be. Your data stays in Germany, 100% encrypted.

No credit card required

Security Questions

Your documents are stored across two German data centers. Frankfurt (Supabase on AWS) handles authentication, storage, and edge functions. Falkenstein (Hetzner) runs the API and processing. Data moves between locations over encrypted links and results are stored back in Frankfurt. Both are ISO 27001 certified facilities inside Germany. Your data never leaves Germany.

Stop searching. Start finding.

Forward by email, let Paperarchive organize, get your time back.

No credit card required