Privacy Notice
1. Scope
This notice describes how Paper Trail handles data submitted to the Service. Documents supplied for examination are recorded public land records and typically contain personal information about parties who are not our customers — names, addresses, parcel identifiers and amounts. We process that information on behalf of the customer who supplies it.
2. Where documents are processed
Documents are not processed on your premises. They are sent to third-party cloud services:
| Subprocessor | Purpose | What it receives |
|---|---|---|
| Amazon Web Services (Textract) | Optical character recognition | Page images |
| Anthropic (Claude) | Classification, extraction, analysis | Recognised text |
| Amazon Web Services (SES) | Transactional email | Recipient address, message |
Local-only processing is on our roadmap and is not available today. Any statement to the contrary is superseded by this notice.
3. What we store
- Uploaded documents and the text recognised from them. Recognised text is encrypted at rest.
- Extracted fields, findings, and the examination file produced.
- Account and usage records, including per-order cost accounting.
Social security numbers and dates of birth are detected by presence only — the fact that such a value appears is recorded; the value itself is not stored.
4. Retention
Retention is configurable per tenant. Absent a specific agreement, order data is retained for the life of the account. Deletion requests are honoured for data we control; records already delivered to you remain yours to manage.
5. Certification status
Paper Trail is not certified under SOC 2, ISO 27001 or any comparable framework. Our subprocessors maintain their own certifications; those describe the subprocessor and not Paper Trail.
6. Marketing contact
If you submit an email address through the site we use it to contact you about the beta. We do not sell it.