Security & privacy

Where your data lives

What's stored, where, what runs on our servers, and the one thing that goes out.

3 min read · Updated June 28, 2026


Document metadata (titles, categories, tags, dates) is stored in a database; the file bytes live in object storage, encrypted at rest by the storage provider. The two are linked only through the API, which enforces your access on every request.

What runs on our servers

  • Text extraction (OCR) runs on Stoatify's own servers. No document bytes are sent to a third-party service to read your scans.
  • Notifications carry only metadata. A reminder or webhook includes a subject and details (a title, a due date), never the document's contents.

The AI feature

Stoatify's AI-assisted organizing can suggest a category, tags, or a contact for a document. When you use it, the relevant text is sent to an external AI model provider to generate that suggestion. It's used only to help you file, never for advertising, and a suggestion is never applied without your confirmation.

Your data is yours

  • No selling or mining. Stoatify doesn't sell your documents, mine them for advertising, or hand them to advertisers.
  • You can delete for good. Emptying Trash removes the underlying file bytes from storage, not just the record.

Good to know

Questions about data handling or compliance for your team? Email support@stoatify.com.

Was this article helpful?

Ready to try it?

Open your vault and put this into practice.

Open app