AI Technology Made in Germany

With us your data is safe

This is because our technology is fully GDPR- and Schrems II-compliant. We store data exclusively on our own servers in Germany and do not work with other service providers in the process.

We are not located in a Germany

We do not belong to any group that is based in a third country. We do not use any service providers in a third country within the scope of our platform.

No data transfers of any kind

Within the scope of the use of our platform, no data transfers of any kind take place in a third country. Thus, no so-called additional guarantees according to DSGVO are required. A simple contract processing agreement is sufficient. And you also conclude this already through our GTC, so there is no effort for you.

No Transfer-Impact-Assessments needed

The fact that we as a company do not have any third-country background and do not use any service providers with such a background within the scope of our platform not only eliminates the effort for the additional guarantees. You as the responsible party can also save yourself the otherwise necessary Transfer Impact Assessment (TIA).

No risk for the persons involved

In February 2022, the Austrian data protection supervisory authority had decided, using Google Analytics as an example, that any risk arising from this transfer and the resulting possibilities in the recipient country must be excluded in the case of third-country transfers. Without third-country transfers, you do not need to worry about this.

GDPR-Compliance by design

When designing our workflows, we have always made sure to integrate the indispensable principles of the GDPR into our algorithms from the very beginning: Privacy by Default and Privacy by Design and the multiple requirements of Art. 5 GDPR have been incorporated into all our design decisions. The result is that processed data is aggregated or anonymized at the earliest possible stage. Data that is not needed is also not processed. All personal data can be deleted by our clients at any time.

Order processing agreement is sufficient

Within the scope of the use of our platform, no data transfers of any kind take place to a third country. Thus, no so-called additional guarantees according to DSGVO are required. A simple contract processing agreement is sufficient. And you also conclude this already through our GTC – so there is no effort for you.

No problems with Privacy Shield

This is because our customers’ data protection officers have incredibly little trouble with us. We have the GDPR in our blood, so to speak, and do everything we can to ensure that not only the processing is as data protection-friendly as possible, but also that the contractual aspects run smoothly.

The abolition of the Privacy Shield as a result of the ECJ’s decision in 2020 made countless processing operations unlawful from one moment to the next and meant that a great deal of effort had to be invested in risk assessments, contract negotiations and the search for alternatives. And the Privacy Shield was not the first time something like this happened – in 2016, the predecessor agreement between the USA and the EU, the Safe Harbor Agreement, was already declared invalid.

Make an appointment

Would you like to learn more about how you can make your document processing DSGVO and Schrems II compliant with the help of Deep-OCR?
Then book an appointment with our expert now.