Your Data Belongs to You.
Your invoices, contracts, and personal documents belong to you - not me, not advertisers, not anyone else. Here is exactly what happens with your data.
- Hosted in Germany
- Your files and database live in Frankfurt, the app servers run in Falkenstein, both ISO 27001 certified. Text recognition (OCR) runs on Google Cloud in the EU, AI models in Microsoft's EU data centers. The few services outside the EU (for example email delivery and push notifications) are listed in the privacy policy.
- No AI training
- Your content is never used to train AI models. Strict data processing agreements with all providers. No exceptions.
- Clear deletion rules
- You can delete documents and your whole account at any time. Deleted documents stay in the trash for 30 days, backups are overwritten after 7 days. The exceptions (for example GoBD retention periods and invoices I have to keep) are listed in the privacy policy.
Stored in Germany. Processed in the EU.
Your files and database are stored in Frankfurt. The app servers in Falkenstein run the document pipeline. Text recognition (OCR) runs on Google Cloud Vision: processing in the EU, a data processing agreement, no training on your data. Digital PDFs with a text layer are read directly in Falkenstein. For AI analysis, only the extracted text is sent over encrypted links to Microsoft Azure OpenAI: the resource sits in Frankfurt, the models run in Microsoft's EU data centers (EU Data Zone). Results are stored back in Frankfurt.
Infrastructure powered by
Frankfurt
Germany
Auth, storage, edge functions
Falkenstein
Germany
API, document pipeline
Why Germany Matters
Germany has some of the strictest data protection laws in the world. Your data is subject to GDPR and German BDSG (Federal Data Protection Act). No selling your data to advertisers. Just serious privacy laws that actually protect you.
Data Journey
Follow Your Data, Step by Step
No mysterious "the cloud." Here's exactly what happens to your documents from the moment you sign up to the moment you search for them.
1. Registration
📍 Frankfurt (Auth) (Supabase)You sign up with your email and password. That's it.
Security Details
- Security:
- TLS encrypted connection, hashed passwords
- Data Stored:
- Only email + hashed password
2. Document Upload
📍 Frankfurt (Storage) (Supabase)You upload a document or forward an email. File goes straight to the Frankfurt datacenter.
Security Details
- Security:
- Encrypted transfer, virus scanning
- Data Stored:
- Encrypted file in Supabase Storage (Frankfurt)
3. AI Processing
📍 Falkenstein (Hetzner) + Google Cloud EU + Microsoft EU Data ZoneThe app servers in Falkenstein run the document pipeline. Text recognition (OCR) runs on Google Cloud Vision in the EU, with a data processing agreement and no training on your data; digital PDFs with a text layer are read directly in Falkenstein. For AI analysis, only the extracted text goes over encrypted links to Microsoft Azure OpenAI: the resource is in Frankfurt, the models run in Microsoft's EU data centers, never outside the EU, and your data is not used for training. Results are stored back in Frankfurt.
Security Details
- Security:
- Encrypted inter-datacenter transfer, strict privacy agreements, no training data usage
- Data Created:
- OCR text, metadata, AI analysis results
4. Secure Storage
📍 Frankfurt (Storage) (Both)Your document and metadata are stored in Frankfurt. The database is backed up daily.
Security Details
- Security:
- AES-256 encryption at rest, automatic backups, access control
- Data Stored:
- Encrypted database records, file storage with checksums
5. Search & Access
📍 Frankfurt (Edge Functions) (Supabase)You search for a document. Queries run through Frankfurt edge functions and databases. Only you can see your results.
Security Details
- Security:
- User-level access control, session management
- Data Accessed:
- Only your documents and the documents of spaces shared with you
Want the Details?
Everything You Need to Know
Ready for Secure Document Management?
Start today and experience how simple secure document management can be. Stored in Germany, processed in the EU, encrypted in transit and at rest.
Try everything free for 30 days. Then keep up to 100 documents free, forever.
Security Questions
Your documents are stored in Frankfurt (Supabase on AWS), which also handles authentication and edge functions. Falkenstein (Hetzner) runs the API and the document pipeline. Both are ISO 27001 certified. Text recognition (OCR) runs on Google Cloud Vision: processing in the EU, a data processing agreement, no training on your data. For AI analysis, only the extracted text goes over encrypted links to Microsoft Azure OpenAI: the resource is in Frankfurt, the models run in Microsoft's EU data centers (EU Data Zone), with a data processing agreement and no training on your data. Results are stored back in Frankfurt.
Stop searching. Start finding.
Forward by email, let Paperarchive organize, get your time back.
Try everything free for 30 days. Then keep up to 100 documents free, forever.