Security and privacy

Invoices contain business and personal data. Here is how we handle them.

Your invoices aren't stored

Files are processed in memory to produce your result, and discarded when the response is sent. We keep no archive of invoices, so there is nothing to leak.

Hosted in the EU

The service runs on Microsoft Azure in the West Europe region, in the Netherlands.

Encrypted connections

Every connection uses HTTPS with TLS 1.2 or newer. Plain HTTP is redirected to HTTPS.

Validation on our own servers

The official EN 16931 and Peppol rules run on our own servers. Your invoice data isn't sent to anyone else to be checked.

Reading PDFs

Only ordinary PDFs, without embedded e-invoice data, are sent to Microsoft Azure AI Document Intelligence in the EU to be read. Microsoft processes them only to return the text, and doesn't use them to train its models.

Careful file handling

Uploads are limited to 20 MB, XML files can't load outside content, and every visitor has a request limit. This protects the service against misuse.