Where your manuscript is processed

PerfectPaper’s application servers and PostgreSQL database run in Frankfurt, and manuscripts uploaded to PerfectPaper are stored in EU object storage in the eu-central region, encrypted at rest. Producing a review requires sending manuscript text to model providers, and the region for each provider is reported on the subprocessor page from live configuration. Error monitoring and product analytics run on United States endpoints and receive no manuscript text.

This page is written for the person at your institution who has to sign off on that, so it includes the parts that do not run in Europe.

Compute and database

PerfectPaper’s application servers run in Frankfurt. The PostgreSQL database holding your account, manuscript metadata, and review history runs in the same region.

Nothing about the application tier is distributed across regions for convenience. Frankfurt is where it lives.

Document storage

Manuscripts uploaded to PerfectPaper are stored in EU object storage in the eu-central region, encrypted at rest with provider-managed keys rather than customer-managed keys.

Storage keys are region-prefixed, which means the region a document lives in is a property of that document rather than a global setting that can silently move. One consequence is worth stating: documents uploaded before EU storage was enabled remain in their original region and continue to be read from there. The estate is mixed by design rather than by oversight, and a migration would move those objects rather than relabel them.

The review itself

Producing a review means sending manuscript text to model providers, so this is the step that matters most for a residency assessment, and it is the step most vendor pages skip.

PerfectPaper reports the region for each provider on the subprocessor page, derived from the configuration the application is actually running under rather than declared in the page template. That design exists specifically so the page cannot claim a residency the traffic does not have. If a provider’s endpoint changes, the page changes with it.

What each provider receives

Not every provider receives the same thing, and the difference matters more than the count.

The review models receive manuscript text, because reading the paper is the work they do. The scholarly search and embedding services receive substantially less — a title and an abstract, not the body. When assessing exposure, that distinction is usually more informative than the length of the vendor list, and the subprocessor page states it per provider.

The parts that are not in the EU

Error monitoring and product analytics run on United States endpoints.

Neither receives manuscript text, but both receive operational telemetry associated with your account, and an assessment that omitted them would be incomplete. Moving them to EU endpoints is tracked internally rather than done, and this page will say so until it changes.

How to verify any of this

The subprocessor page is the authoritative list and reports live configuration rather than a static claim.

For an institutional review that needs more than a public page, the security contact published in PerfectPaper’s security.txt is the right route, and questions from research offices about data handling are answered directly rather than through a sales process. The procurement checklist sets out what else is worth asking, and secure AI review for unpublished research covers what PerfectPaper does not claim.

Review my manuscript

Frequently asked questions

Is PerfectPaper GDPR compliant?

PerfectPaper operates a self-service privacy rights path for access, correction, export and erasure requests, names its subprocessors publicly, and runs its application tier and database in Frankfurt. Data protection questions from research offices are answered directly.

Are my documents stored in the EU?

Manuscripts uploaded to PerfectPaper are stored in EU object storage in the eu-central region. Documents uploaded before EU storage was enabled remain in their original region and continue to be read from there.

Does my manuscript leave the EU during review?

That depends on the model provider handling the lane. PerfectPaper reports the region per provider on the subprocessor page from live configuration rather than asserting a single answer here.

Is anything about PerfectPaper hosted in the United States?

Yes. Error monitoring and product analytics run on United States endpoints. Neither receives manuscript text, and both are listed rather than omitted.

Can I get a data processing agreement?

Institutional data protection questions, including processing agreements, are handled directly. The security contact published in PerfectPaper’s security.txt is the fastest route.