Trust, in writing.
Five regions, hard boundaries.
Region-locked processing
Documents uploaded to a region are processed and stay within that region. Supports GDPR, US/Canada data residency laws, client data policies, and cross-border regulatory requirements.
Deleted means deleted
Uploaded documents are automatically deleted 30 days after upload, processed outputs 30 days after they're generated, and intermediate processing artefacts within 7 days. You can delete a job — and its files — at any time, and closing your account permanently deletes your documents within 24 hours.
Never used for training
Your documents are never used to train models — ours or anyone else's. They are processed to produce your bundle, and that is all.
Don't take our word for it — take the paperwork.
A DPA before a single page
Our standard data processing agreement covers how documents are handled, stored, and deleted, and who processes them. Email us and we'll execute it before you upload anything.
Sub-processors, disclosed
A full list of our sub-processors — who they are, what they do, and in which region — is available with the DPA. Email us for the current list.
An audit trail on every job
Every job ships a JSON log — every file ingested, every duplicate identified, every page reordered. You don't have to trust the summary; you can check the work.
Verified account, £1 hold
Sign-up places a £1 refundable hold to verify the account. No charge is ever taken from it, and there is no subscription to cancel.
Try it without real data
Email us and we'll run a before-and-after on a non-sensitive sample set, so you can judge the output without uploading anything real.
Questions before a single file?
Ask us anything on this page — regions, retention, sub-processors, certifications. We answer in writing, before you sign up.