In short: A GDPR-compliant (DSGVO) document scanner keeps your documents under your control: original files on your device, hosted in the EU when a server is involved, without hidden third-party trackers or fonts, and with a data-processing agreement (AVV) available. Scandora keeps your original files off our servers, uses EU hosting (Hetzner, in Germany) for the few server-side steps, loads no third-party fonts or ad trackers, and runs on managed AI.
What to look for in a GDPR document scanner
| Criterion | What it means | Scandora |
|---|---|---|
| Hosting location | Server-side steps run in the EU | EU hosting (Hetzner, in Germany) |
| Document storage | Do documents stay under your control? | Originals stay on device; a preview, the extracted text and document details sync (EU servers) |
| Third-party trackers & fonts | No data sent to ad/CDN third parties | No third-party fonts or ad trackers; self-hosted analytics |
| Managed AI | AI extraction without your own key | Yes (managed credits) |
| Data-processing agreement | Required for business use | AVV / DPA available |
| GoBD record-keeping | Content hash and audit log; Verfahrensdokumentation coming soon | Yes (not "GoBD-certified") |
How Scandora is built for it
- Your documents stay yours. Your original scans stay on your device and go only directly to Google Gemini for extraction — using a short-lived credential our server issues — and to the cloud services you choose. So your history syncs across your devices, we store a low-resolution preview, the extracted text and the document's details on our EU servers — never your original files. The text and preview are encrypted on your device before upload; we hold a key to them unless you turn on Advanced Protection in the app, which locks them with your own code.
- EU hosting. The few server-side steps run on Hetzner infrastructure in Germany.
- No third-party trackers. The website loads the Inter font from its own server rather than a font CDN and uses self-hosted, privacy-respecting analytics rather than an ad tracker.
- Managed AI. Extraction runs on Scandora's managed AI — no key to set up.
Which part of a scan sits on which server — path by path, sub-processors included — is set out on the document scanner on EU servers page.
Ready for a scanner with EU hosting and no ads? Start free with managed AI.
FAQ
Is Scandora a GDPR-compliant document scanner?
Scandora is designed for DSGVO/GoBD record-keeping: your original scans stay on your device and in the storage you choose (a low-resolution preview, the extracted text and the document's details sync to our servers), EU hosting (Hetzner in Germany) is used for the few server-side steps, and no third-party fonts or ad trackers are loaded. GDPR compliance of your overall process also depends on how you store and retain documents.
Where are my documents stored?
Your original files stay on your device. Scandora does not store your original files or page images on its servers — scans go to the cloud services you choose and, for extraction, directly from your device to Google Gemini using a short-lived credential our server issues; when you are signed in, a low-resolution preview, the extracted text and the document's details sync to our EU servers so your history is available on every device.
Does Scandora send my data to third-party trackers?
The Scandora website loads the Inter font from its own server rather than a font CDN and uses self-hosted, privacy-respecting analytics rather than an ad tracker, so visitor data is not sent to third-party ad networks.
Can I sign a data-processing agreement (AVV / DPA)?
Yes. An AVV / DPA is available for business customers.
