PEPPOL in03:01:43

Get compliant

GDPR Information

Last updated: March 2026

Dokus is fully committed to GDPR compliance. This page outlines how we handle your data in accordance with the General Data Protection Regulation.

Data controller

Dokus acts as the data controller for personal data processed through our platform. Our registered office is in Belgium.

Legal basis for processing

We process your data based on: contractual necessity (to provide the service), legitimate interest (to improve the service), and consent (for optional communications).

Data processing

Financial documents are processed to extract structured data. All processing occurs within EU-hosted infrastructure. We do not transfer data outside the EEA.

Data retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Financial records may be retained as required by Belgian law.

Your GDPR rights

You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any right, contact privacy@dokus.tech.

Data Protection Officer

For GDPR inquiries, contact our data protection team at privacy@dokus.tech.