Secure AI review for unpublished research

PerfectPaper reviews unpublished manuscripts, and never uses your content to train a model. Not the paper, not the model’s reasoning, not its reply, not the derived metadata. Application servers, database and document storage run in Frankfurt and the eu-central region, and every third party that receives any part of your manuscript is named publicly.

An unpublished manuscript is the one document in a researcher’s working life with no protection from a publication date. The findings are not yet credited, the priority claim is not yet established, and the methods are not yet in the public record. That is a different risk profile from a published PDF, and it deserves different handling. This page answers the questions a research office asks, in specifics rather than in adjectives.

Your research is never used to train a model

PerfectPaper never uses your content to train a model. Three separate things make that true.

PerfectPaper’s own code trains nothing and fine-tunes nothing, so no customer manuscript is training data by construction. The model providers that process your text are bound by commercial and cloud contract terms rather than by a per-request switch. And PerfectPaper’s evaluation corpus contains no customer work at all — it is eight synthetic papers written for the test harness with deliberately planted flaws.

The middle layer is the one worth reading closely, and how the no-training guarantee is enforced sets it out in full, including what PerfectPaper does not do.

Where your manuscript is processed

PerfectPaper runs in Frankfurt. Application servers and the PostgreSQL database are hosted in the eu-central region, and manuscripts uploaded to PerfectPaper are stored in EU object storage, encrypted at rest.

Producing a review requires sending manuscript text to model providers, so the route those calls take is the part that matters most for an institutional assessment. Where your manuscript is processed sets out the full route, including the components that do not run in Europe.

Who receives your manuscript, and how much of it

Not every service PerfectPaper uses receives the whole paper. The review models receive manuscript text, because reading the manuscript is the work. The scholarly search and embedding services receive far less — a title and an abstract, not the body.

The subprocessor page names every one of them and states what each receives. That page is the authoritative list and reports live configuration; this page summarises it and will always be the less current of the two.

What PerfectPaper does not claim

PerfectPaper is not SOC 2 certified and does not claim to be. PerfectPaper does not offer a HIPAA business associate agreement, and manuscripts containing protected health information should be de-identified before upload in line with your institution’s policy. Encryption at rest uses provider-managed keys rather than customer-managed keys.

Naming these plainly is deliberate. A research office evaluating a vendor needs the boundaries as much as the capabilities, and a page that lists only strengths is a page that has to be verified twice. If you are running that evaluation, the procurement checklist is written to be used against PerfectPaper as readily as against anything else.

Using an AI reviewer without breaching journal policy

Journal policies on artificial intelligence treat authors and peer reviewers very differently, and conflating the two leads researchers to avoid tools they are permitted to use. Journal AI policies for authors and referees explains which rule applies to you and what a disclosure statement usually contains.

Deleting your work

You can delete a manuscript and its review from your account. PerfectPaper also operates a self-service privacy rights path for access, correction, export and erasure requests rather than routing them through a support queue. Accounts are limited to verified academic researchers, which narrows who can hold your work on the platform in the first place.

Review my manuscript

Frequently asked questions

Is my unpublished paper used to train AI models?

No. PerfectPaper never uses your content to train a model — not the paper, not the model’s reasoning, not its reply, not the derived metadata. PerfectPaper’s own code trains on nothing, and the model providers processing your text are bound by contract terms rather than by a setting.

Is PerfectPaper SOC 2 certified?

No. PerfectPaper is not SOC 2 certified and does not claim to be. Security controls are documented internally and the processing route is published in detail, but there is no third-party attestation report to request at this time.

Where is my manuscript stored?

Manuscripts uploaded to PerfectPaper are stored in EU object storage in the eu-central region and encrypted at rest. Application servers and the PostgreSQL database run in Frankfurt.

Who else can see my manuscript?

No other PerfectPaper user can see your manuscript unless you share the workspace with them. Model providers and a small number of named service providers process it to produce your review, and each is listed on the subprocessor page with what it receives.

Does using PerfectPaper affect my ability to publish?

No. Using an AI tool on your own manuscript is not prior publication. Most journals ask authors to disclose AI assistance rather than prohibit it, which is a separate question from the confidentiality rules that restrict peer reviewers.

Can I delete my manuscript?

Yes. You can delete a manuscript and its review from your account, and PerfectPaper operates a self-service privacy rights path for access, export and erasure requests.