Trust Center

Trust comes first at DocsOrb. Our core promise is to help companies adopt AI safely and responsibly, and that starts with the trust we hold ourselves.

Last updated September 21, 2026

Request DPAPrivacy policy

Overview

DocsOrb UG is a German company. Customer product data is hosted on Supabase in AWS Frankfurt (eu-central-1). GDPR applies. We sign a DPA on request.

Certifications

CertificationsStatus
GDPRCurrent
DPAAvailable
Cyber Essentials PlusPlanned
ISO 27001Planned
ISO/IEC 42001Planned

Email help@docsorb.com if you need certification status in writing for procurement.

Documents

DocumentAccessAction
Data Processing AgreementOn requestRequest
Privacy policyPublicView
AI Data Processing PolicyPublicView
Terms of ServicePublicView
Legal noticePublicView

Data residency

Host
Supabase
Region
AWS eu-central-1 (Frankfurt, Germany)
Backups
Same EU region
Data covered
Policies, acknowledgments, training records, inventories, and uploads

Website analytics and some support or AI features may be processed by subprocessors outside the EU. These transfers use safeguards recognised under GDPR.

Subprocessors

Processors used to operate DocsOrb.

ProcessorPurposeLocation
SupabaseAuthentication, database, and storageEU (Frankfurt)
ResendTransactional email such as invitations and remindersProvider-dependent
CrispLive chat and customer supportEU
Google AnalyticsWebsite analytics and performance measurementProvider-dependent
MistralLLM inference for AI-assisted product featuresProvider-dependent
TypeSafe System One JevLLM inference for AI-assisted product featuresProvider-dependent

The versioned list is part of the DPA. Email help@docsorb.com if you need the current version in writing.

Data handling

Retention
Customer data is kept for the term of the subscription. Deletion on request is possible at any time. Account data is usually deleted or anonymised within three months of account closure unless the law requires a longer period.
Deletion
After the contract ends, customer data is deleted or anonymised within three months unless the law requires longer retention.
Model training
Prompts, policies, and outputs are not used to train DocsOrb or third-party models. Where available, we use zero-retention endpoints from model providers.
Encryption
Data is encrypted in transit and at rest.

Legal entity

Company name
DocsOrb UG (haftungsbeschränkt)
Address
Haymannstraße 3 85764 Oberschleißheim Germany
Registry
Local Court Munich · HRB 302694

FAQ

Customer product data is stored in Supabase on AWS eu-central-1 in Frankfurt. Backups stay in the same EU region. Some website, support, or AI subprocessors may process data outside the EU with safeguards recognised under GDPR.