GDPR-compliant AI
Your data in Germany, the models in the EU
Ocost reads invoices, delivery notes and contracts: the documents a business guards most. Here is where they are kept and who can reach them.
Where your data is
Servers in Germany
Ocost runs on Hetzner’s servers in Germany (Nuremberg and Falkenstein); the files are in Hetzner’s object storage there too.
Models in the EU
The models that read documents and answer questions run in the EU; the search index runs on Ocost’s own hardware, at no other provider.
Each business apart
Every row of a business’s data carries that business, and the database itself refuses any other business’s rows (row-level security).
Encrypted on the way
Every connection to Ocost is HTTPS (TLS); the servers’ secrets are encrypted in the cluster.
What happens to it
Originals as they came
Ocost never changes a file it was sent; what it reads is kept beside it.
Backups for 30 days
The database is backed up every night and its changes continuously, kept 30 days, in Germany.
Deleted when you ask
What you delete goes to the Trash until it is deleted for good; after the contract, your content is deleted or returned as the AVV says.
A DPA with every customer
A data processing agreement under Art. 28 GDPR with every customer; the subprocessors are named in the privacy policy.
Ready in minutes
Send Ocost a month of documents
Sign up with your work email. Ocost reads your website and the register, fills in your company and starts reading what you send.
No card needed · the trial has the limits of S