Questions About OCR.Space OCR API for Enterprise Use

We received these good questions from a potential new OCR API user today:

Dear OCR.Space Support Team,

We are considering using your OCR solution within our organization and need clarification on some essential aspects regarding security, compliance, and data protection.

Could you please provide information on the following key points?

  • Data Storage and Processing:
    – (1) Where are data stored and processed geographically?
    – (2) Are servers located within the EU, or are they hosted elsewhere?
  • Data Protection and Compliance:
    – (3) Is your solution GDPR-compliant?
    – (4) Do you have any certifications?
  • Security:
    – (5) What measures are in place to secure uploaded data (e.g., encryption)?
    – (6) How long is processed data retained on your servers?

We appreciate your support and a prompt response.

Thanks for asking such good questions.

(1) All data is processed inside EU datacenters. Note that no data is stored at all (see also #5 and #6 below).

(2) Yes, EU only (France, Germany and Finland).

(3) Yes, fully GDPR compliant

(4) No (the overhead of getting these is too complicated at the moment)

(5) We do not store any of your data. Every document is deleted directly after it was OCR processed. So your data is on our servers for less than one minute. If you instruct the API to create a searchable PDF, the PDF result file will be available on our servers for 60 minutes to allow the download, and then deleted as well.

(6) See #5. 60 minutes for searchable PDF, and less than a minute for everything else.

For more information see also OCR.SPACE Privacy Policy