Zerodoc is built so the privacy promise is enforced by the architecture, not just stated in a policy. Documents are processed in memory and discarded the moment we respond — they are never written to disk and never stored.
Your document never touches a disk.
It’s processed in memory and gone before you finish reading the response — we can’t leak, lose, or be compelled to hand over what we never store. Zero-retention and EU processing are included on every plan, the free one included; they are never a paid upgrade.
Every document you send to /v1/extract is held only in RAM for the duration of the request, then discarded. There is no document store, no archive, and no “retain for N hours” setting — by design, there is no code path that persists a document or its extracted content.
Each response includes an explicit "retention": { "stored": false } block as a machine-readable confirmation.
Document processing runs on infrastructure in the EU — on every plan, including the free tier, never as a paid add-on. Zerodoc is operated by an Isle of Man company — an EU-adequate jurisdiction with a strong privacy reputation — which acts as the data controller.
The only data we retain is what’s needed to run accounts and billing: your email address, a one-way hash of your API key (never the key itself), and usage metadata (page counts, timestamps). We never store your documents or the data extracted from them.
We use a small set of vetted providers, none of which receive your documents:
Zerodoc is built to be GDPR-aligned, with a Data Processing Agreement available. A SOC 2 Type II programme is on our roadmap. See our Privacy Policy for the full detail.
Found a security issue? Email security@zerodoc.io — we welcome responsible disclosure.