Security and privacy
Your documents contain sensitive information – contracts, notices, customer data. That's why you stay in control with Accessful: processing on German infrastructure, deletion functions via the API and, if desired, operation completely in your own environment.
Processing on German infrastructure
In the cloud, Accessful processes your documents in compliance with the GDPR on German infrastructure in ISO/IEC 27001-certified data centres. The entire processing workflow—from upload and analysis to remediation and download—remains in Germany.
Important for your audit: The ISO/IEC 27001 certification applies to our hosting partner’s data centres. We state this precisely because you rightly expect the same precision from our audit reports.
-
Hosting in Germany
Your documents are processed on infrastructure in Germany - from upload to download.
-
ISO/IEC 27001 certified data centres
The hosting runs in data centres whose information security management is certified according to ISO/IEC 27001.
-
GDPR-compliant processing
Processing complies with the GDPR. See our Privacy Policy.
You decide what happens to your documents
The REST API contains documented deletion functions: You delete individual processes using the case ID and entire inventories in a batch call. This is how you technically implement your internal deletion concepts – directly from your own systems.
For maximum control, you operate Accessful On-Premises in your own infrastructure - air-gapped if desired, with your own AI models behind your firewall. Documents remain within your organisation.
- Deletion of individual processes per case ID via the API
- Batch delete multiple operations in one call
- On-premises operation including air gap option
DELETE /api/v1/upload-service/delete/{caseId}
X-API-Key: your-api-key
→ deletes one job
DELETE /api/v1/upload-service/delete
→ deletes multiple jobs in one batchData minimisation through genuine opt-in
Optional analytics, B2B visitor analytics and live chat can be useful, but they do not take priority over your choice. No provider script, iframe or tracking request is loaded before you consent to the relevant category.
All details can be found in the Privacy Policy.
- No optional provider request before active consent
- Separate choices, an equally prominent reject option and withdrawal at any time
- Self-hosted fonts instead of font CDNs
- No HubSpot or B2B browser tracking on the contact form page
What we are working on
For us, security and compliance are not a closed chapter, but ongoing work. We are continuously expanding our documentation and prefer to answer questions from compliance officers, IT management and data protection officers specifically rather than with buzzwords.
Do you need a data processing agreement (DPA) or other documents for your internal audit? Contact us to discuss which documents we can provide for your use case.
Documents for your audit
Briefly describe your application and your requirements to us – we will get back to you with a concrete answer instead of a brochure.
Contact usNote: This content provides general information about legal requirements and does not constitute legal advice.
Frequently asked questions about security and privacy
Where are my documents processed?
In the cloud, documents are processed on German infrastructure in ISO/IEC 27001-certified data centres. The certification applies to our hosting partner’s data centres. With on-premises deployment, processing takes place entirely in your own infrastructure.
How do I delete processed documents?
Use the REST API to delete individual jobs by case ID or several jobs in one batch request. The endpoints are described in the API documentation. With on-premises deployment, the data remains entirely in your own systems.
Can Accessful be operated without an external connection?
Yes. When operating on-premises, Accessful runs completely in your infrastructure - air-gapped if desired, i.e. without an external connection, with its own AI models behind your firewall. Details can be found on the page On-Premises.
Does this website use cookies or tracking?
Only with your permission. Google Analytics, B2B visitor analytics and HubSpot chat remain technically blocked until you actively enable the relevant category. Necessary storage remembers only your language and privacy choices. You can withdraw consent at any time in the privacy policy settings.
Test Accessful for your own needs.
Upload a document and see the result in seconds - or discuss operation in your own infrastructure with us.