Local analysis and AI processing are not the same service.

Document bytes, reviewer-entered values, local findings, and the SHA-256 fingerprint remain in the browser. For those contents, Ocolta is not acting as a processor through the public Integrity Scan.

After versioned consent, Cloudflare hosts the Worker that receives and validates the file and Turnstile request. Ocolta sends the full file and, for PDFs, the filename to OpenRouter, requesting openai/gpt-5.6-terra. OpenRouter dynamically selects an endpoint that satisfies Ocolta's ZDR, no-data-collection, parameter, service-tier, and rate requirements. The downstream provider and served model are recorded only when OpenRouter reports them. The pay-per-use workspace does not save the submitted document; for up to 24 hours it keeps the normalized model-authored report, any Deep Review+ corroboration appendix, and safe processing/consent metadata while omitting the deterministic scan and its derived combined assessment. The appendix can retain model-extracted institution names, printed business addresses, domains or payroll descriptors, and public-source outcomes and URLs. Model-authored text and the appendix can repeat source-document information.

OpenRouter retains non-content request metadata and states that prompt/response logging depends on an account setting that source code cannot prove. If your organization requires a signed DPA, a named subprocessor, confirmed account-level ZDR, regional processing, or other contractual safeguards, do not submit covered data until Ocolta confirms them in writing.

Cloudflare hosts delivery, Worker execution, Turnstile, database, object storage, and cookieless analytics. OpenRouter is the AI gateway and routes to a policy-eligible model endpoint. Stripe processes payment and checkout data. Resend delivers document-request emails. Deep Review+ may send an institution-typed name and that institution's printed business address to Exa when configured; a public RDAP service receives the printed institution domain used for domain-registration lookup. The intended categories for these service roles are described in the privacy notice, but automated extraction and classification can be wrong. Remove personal data the review does not need.

When you send a document request, Ocolta processes the recipient's email address, any name and note you supply, and any document they return, on your instruction. Ocolta emails that person through Resend, names you as requester, and sets your address as reply-to. You are responsible for a lawful basis to contact them and ask for the document.

With retention off, Ocolta discards document bytes after the server scan while keeping file metadata, a SHA-256 fingerprint, and findings for the bounded results window. With retention on, Cloudflare R2 also stores the bytes; download access ends fourteen days after arrival and asynchronous deletion follows through an hourly Worker sweep. A checked-in lifecycle configuration is provided for an operator to apply as an independent backstop, but this source audit did not verify it as active in production. All link access ends after thirty days or immediately on cancellation. Ocolta's request-database rows become purge-eligible fourteen days after access closes, with bounded physical deletion thereafter.

Resend and the parties' mailboxes separately receive request and delivery-email copies. A delivery email can include the filename, result summary, flagged-finding titles, and requester link; deleting Ocolta's database row does not delete those external email copies.

Ocolta reports structural signals about a file. It does not evaluate a person, furnish consumer reports, or act as a consumer reporting agency. If your use is regulated, those obligations remain yours and Ocolta's output must not be treated as an adverse-action basis on its own.

The standard pay-per-use terms and this status page are not a customer-specific DPA. Ocolta will not imply that local-only assurances automatically apply to an uploaded AI request or to a future shared workspace.

For a service-specific data-processing review, contact hello@ocolta.com before submitting regulated or contractually restricted document contents.

Compare both security flows and read the terms of use.