Your documents, processed and purged.
Encryption everywhere, API-key access, regional processing, and automatic purge after processing — engineered to support GDPR, UK GDPR, India's DPDP Act, and POPIA for customers worldwide.
Security built into every request
Encryption everywhere
TLS 1.3 in transit and AES-256 at rest. API requests are authenticated with secret keys you control and can rotate.
Auto-purge after processing
Submitted documents are processed transiently and purged automatically once your result is returned. We do not retain Customer Content or use it to train models.
Regional processing
Documents are processed on GCP Mumbai for India and Johannesburg for Africa / ME, so data stays within the customer's region. Enterprise can request specific regions.
Access control
Per-organisation API keys, scoped access, and audit-friendly request logging. Enterprise adds SSO and advanced controls.
Resilient & monitored
99.5% uptime SLA with monitoring and alerting. Enterprise deployments add high availability, custom RTO/RPO, and on-premise options. [PLACEHOLDER: hosting/cert detail]
Data minimisation
We process only what is needed to fulfil the request and return structured output — no long-term document storage on pay-as-you-go.
Designed for global data-protection law
Abscode Document AI is built to help you meet your obligations. Certifications held by Abscode are listed below.
Sub-processors
We use a small number of vetted sub-processors under data-protection contracts: cloud hosting (Google Cloud — Mumbai and Johannesburg) and payment processing (Razorpay for India, Stripe globally). A current list is available on request.
Data Processing Agreement (DPA)
A DPA — including SCCs for international transfers — is available to customers. Request it at privacy@abscode.com.
Report a vulnerability
We welcome responsible disclosure. Email security@abscode.com [PLACEHOLDER: confirm security inbox] and please do not publicly disclose until we have responded. For confirmed personal-data breaches we notify affected customers and authorities within the timelines required by GDPR, DPDP, and POPIA.