GDPR Information
Last updated: March 2026
Dokus is fully committed to GDPR compliance. This page outlines how we handle your data in accordance with the General Data Protection Regulation.
Data controller
Invoid Vision B.V. (registered in Belgium, KBO/BCE 0777.887.045) is the data controller for personal data collected through dokus.tech and your Dokus account. For personal data contained in financial documents uploaded by our customers, we act as a processor on the customer's instructions. The customer remains the controller.
Legal basis for processing
We process your data based on: contractual necessity (to provide the service), legitimate interest (to improve the service), and consent (for optional communications).
Data processing
Financial documents are processed to extract structured data. That processing, and the storage of the documents themselves, runs on infrastructure hosted in Belgium. Website, analytics and Peppol sub-processors operate within the European Union; where a sub-processor operates outside the EEA (Slack for internal alerting, Resend for transactional email, Vercel for website delivery, WhatsApp and Telegram for support chat, and Anthropic for the optional Ask assistant), the transfer is covered by Standard Contractual Clauses and additional safeguards. See our Privacy Policy for details.
Data retention
We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. On account closure, customer documents are deleted or returned at your choice; retention beyond that occurs only where Belgian accounting legislation requires it (up to 10 years for invoices and accounting documents).
Your GDPR rights
You have the right to: access your data, rectify inaccuracies, request erasure, restrict processing, data portability, and object to processing. To exercise any right, contact support@dokus.tech.
GDPR contact
For any question about how we handle your data, or to exercise your GDPR rights, email support@dokus.tech. We aim to respond within 30 days.
Data Processing Agreement
A Data Processing Agreement is available as part of every business relationship. It sets out what we process, on whose instructions, and how data is returned or deleted when the relationship ends. Request it at support@dokus.tech — supplier and procurement questions are answered within one working day.
You can also request account deletion directly.