Confidentialité
Where your paper goes
An unpublished manuscript is the most sensitive thing an author will ever hand a piece of software. This page names every company that touches yours, what each one receives, and the country it runs in.
Your paper is stored in Germany
PerfectPaper runs in Frankfurt. The application servers, the database that holds your parsed paper and every finding written about it, and the bucket your uploaded file lands in are all in Germany. That places the stored copy of your work under the GDPR and the German Federal Data Protection Act (Bundesdatenschutzgesetz), and outside the reach of a foreign disclosure order aimed at a US data centre.
One honest limit on that sentence: files uploaded before 27 August 2026 are still in Ohio and were deliberately not moved. And storage is not the whole story — the models that read your paper run elsewhere, which is the next section rather than a footnote.
Your paper is reviewed in the United States
The review is the product, and the models that produce it are not ours. Your full manuscript goes to Anthropic (United States) and to Google (United States) on every review, and your title and abstract go to Voyage AI for journal matching.
None of these providers may train on your paper. That is a contractual commitment in their terms, not a switch we flip per request, and it is the protection we can actually offer you today.
Everyone who touches your work
| Entreprise | What it receives | Where it runs |
|---|---|---|
| Fly.io Reads your paper | Runs the application itself — every request you make touches it. | Frankfurt, Germany |
| Fly Managed Postgres Reads your paper | The database: your account, the parsed paper, every finding, every comment and edit, and the access log. | Frankfurt, Germany |
| Amazon S3 Reads your paper | Your uploaded file, byte for byte, and the figures extracted from it. | Frankfurt, Germany (eu-central-1). Files uploaded before 27 August 2026 remain in Ohio (us-east-2) and were deliberately not moved. |
| Anthropic Reads your paper | The whole manuscript, on every review. The reviewers and the verification pass are Claude models. | United States |
| Google (Gemini API) Reads your paper | The whole manuscript, for the literature and journal research lanes. | United States |
| Voyage AI Reads your paper | Your title and abstract only, turned into embeddings for journal and literature matching. | United States |
| Cloudflare | DNS, the TLS edge, and the country code your request arrives with — which is what sets your cookie-consent default. | Global edge network |
| Stripe | Payments, subscriptions and invoices. Card details go to Stripe directly; we never hold them. | United States and Ireland |
| Resend | Outbound email, and papers you send to your ingestion address. | United States |
| Sentry | Crash reports and release diagnostics when something breaks. | United States |
| PostHog | Product analytics, only with your consent, and with the manuscript title stripped from every event. | United States |
| Crossref, OpenAlex, Semantic Scholar, ORCID | Lookups for the works you cite and for your own publication record — a title, a DOI or an author name at a time, never the paper. | United States and United Kingdom |
How this list is kept honest
This inventory is code, not a document. The tests that guard it fail if the configured review model is not listed here, if a service that reads your paper does not name the country it runs in, or if an adapter with no production credential is advertised as though it were in use.
We list what is configured in production. PerfectPaper's source carries connectors for other model providers that hold no credential and receive nothing; naming them would make the estate look larger than it is.
Last reviewed: Updated 9 September 2026. Enterprise customers may request the contractual documentation behind any row.
Des questions ou des corrections? Écrivez-nous à [email protected] .