- Upload.
- Your PDF lands on Cloudflare R2 storage restricted to the European Union. It stays there only for the time of the transfer.
- Conversion.
- Our backend, hosted by OVH in France, turns the PDF into page images.
- Analysis.
- Our own model, running on Scaleway in France, reads those images and produces your report. No call is made to OpenAI, Anthropic, Google or any third-party AI provider.
- Deletion.
- Every copy of the deck and its images is deleted as soon as the analysis is complete, and at the latest within 24 hours (seven days at most for organisation accounts, when an analysis fails and is retried). Only the report is kept, in your account, until you delete it.
- No training.
- Your documents are never used to train or fine-tune any model.
- Controls.
- Multi-factor authentication on every infrastructure console, encryption at rest, daily backups, twelve months of access logs, an annual restore test.
- Contracts.
- Our Terms of Use, Terms of Sale and Data Processing Agreement are published, and our three sub-processors are named in the DPA: Cloudflare, OVH, Scaleway.
- Reporting a vulnerability.
- Write to the security address given in the legal notice. We acknowledge within two working days.