Trust & compliance
Compliance & Responsible Use
Last updated 14 September 2026
Compliance depends on actual use and jurisdiction. DocStructa applies conservative privacy and security controls, while customers remain responsible for laws that apply to their own documents, accounting and business activities.
Local document processing
Source PDF and image statements are processed in the browser. Conversion code is tested to prevent application network/API calls during the extraction path. Optional retained History contains structured output rather than the uploaded source statement file.
Access and retention
Customer records are owner-isolated. Retained results have a defined expiry and are removed by the retention process. Users may shorten retention or delete individual History records and account data.
Payments
Payments are handled through Stripe. Subscription and payment lifecycle events are verified using signed Stripe webhooks. Card and wallet credentials are not stored by DocStructa.
Accuracy
Extraction remains editable and reconciliation or uncertainty warnings are surfaced for review. A warning is not a finding of fraud, and absence of a warning is not a guarantee that a statement or transaction is genuine or correct.
Business use
Accountants, bookkeepers and other organisations processing personal data for clients should ensure they have authority and a lawful basis to do so. The Data Processing Terms apply where DocStructa acts as their processor.