Security and data protection

Your documents stay in Germany and the EU

Invoices, contracts and reports are confidential. Excalitract is operated in data centers in Germany, accesses AI models exclusively via EU model routes and grants access only to those you explicitly authorize.

Hosted in Germany

Excalitract runs in data centers in Germany. Your documents and results are kept in private storage per tenant.

AI only via EU model routes

Text recognition and language models are accessed exclusively via EU routes. Falling back to other regions is technically ruled out.

Microsoft® sign-in

Your team signs in with a Microsoft® account (single sign-on). No access secrets are stored in the browser.

Roles instead of blanket access

A login alone grants no access. Permissions arise only from explicitly assigned roles: read, review or manage.

Tenant isolation

Data of different tenants is technically isolated; requests for other tenants’ data come back empty.

Audit log

Relevant actions are logged. Review history and billing are stored immutably.

Traceability

Every decision stays visible

Corrections are not overwritten but saved as revisions. Review decisions, approvals and billing are logged. This lets you show for every value where it came from and who confirmed it.

Review and approval against the originalThe extracted fields are shown for review next to the original. Two values are confirmed and one value is corrected – the old value remains visible in the history. Only then is the document approved.ReviewInvoice numberRE-2025-0815confirmedInvoice date14 Feb 2025confirmedNet amount1.824,50 €€1,284.50correctedHistory: model value → manual correctionApprove document ✓Review and approval against the originalThe extracted fields are shown for review next to the original. Two values are confirmed and one value is corrected – the old value remains visible in the history. Only then is the document approved.ReviewInvoice numberRE-2025-0815confirmedInvoice date14 Feb 2025confirmedNet amount1.824,50 €€1,284.50correctedHistory: model value → manual correctionApprove document ✓
Handling of data

Clearly defined, contractually if you wish

  • External AI processing only for projects where it has been enabled – and only via EU model routes.
  • Isolated tenants, each with its own private document storage.
  • We agree retention and deletion periods for originals and results with you.
  • Operational logs without document content.
  • Data processing agreement (DPA) on request.

We are happy to answer questions from your data protection or information security team in detail.Get in touch.

Demo

See Excalitract with your documents

No standard show: we prepare the demo for your documents and fields. Afterwards, you will know how Excalitract handles your document collection – and how you can measure it on a test set of your documents.