Disclosure control for regulated EU organizations
Every file you release, proven clean.
Northdocs finds personal and privileged data across documents, email, and meetings, removes it from the file itself, and refuses export until verification finds nothing left. Customer files are hosted and processed in the EU.
Evaluating for one team? Run a 30-day pilot on your own filesTake the interactive tour
- Documents in pack
- 37
- Identities accepted
- 23 (148 mentions)
- Removed from content stream
- 148 / 148
- Scanned pages burned in
- 12
- Re-extraction survivors
- 0
- Approved by
- Reviewer + partner
- Processing region
- EU (Frankfurt)
Proof on your own files
Don't take a testimonial's word for it. Bring a disclosure you already released, and we will run it through verification with your team watching.
A European stack, named
- OVHcloudHosting and processing in Frankfurt
- OVHcloud AI EndpointsEU inference, and it can be switched off
- Northdocs ApSDanish company, CVR 46848195
Published for your review
- GDPR Art. 28 Data Processing Addendum
- WCAG 2.1 AA accessibility statement
- Pre-answered security questionnaire
SOC 2 and ISO 27001 are on the roadmap, not yet certified. Ask for the current status letter.
One platform
Personal data leaves your organization through three doors. Guard all of them.
Most confidentiality breaches are not attacks. They are a disclosure pack, a reply-all, or a paste into an AI tool. Northdocs puts one policy and one audit trail across each exit.
Disclosure Workcell
FOI, DSAR, litigation, and data room packs. Accept a person once across the whole case, remove them from every file, and ship a bookmarked binder only after verification passes.
Outbound Guard
An Outlook add-in that checks each send for CPR numbers and other personal data, warns or SoftBlocks, and offers a sanitized version before the message leaves.
Runs when the add-in loads. It is not a mail-flow hard block.
Prompt Guard and Conversation Redact
Strip personal data from text before it reaches ChatGPT or Copilot. Redact Teams, Slack, and WhatsApp exports and meeting audio with beep, silence, or voice anonymization.
How a release works
A black box on top of text is not removal. Northdocs proves the difference.
- 01ConnectPull cases from SharePoint, iManage, HighQ, Datasite, or your ESDH. Private connectors run on premises.
- 02DetectValidated ID patterns first, then a local Nordic entity model, then EU-hosted AI for privilege and health narrative.
- 03DecideReviewers accept each person once in Fast Track. Approval workflows and ethical walls enforce who signs off.
- 04RemoveText is deleted from the PDF content stream. Boxes over scans are burned into the page image.
- 05VerifyWe re-extract every page and scan the bytes. One unexpected survivor and export stays blocked.
- 06EvidenceA tamper-evident QA certificate and an audit export record what was removed, by whom, and on what basis.
$ copy text from PDF
The applicant Mette Nielsen lives at Nørrebrogade 14.
$ copy text from PDF
The applicant [Person 1] lives at [Address 1].
The platform
Everything a disclosure needs, in one workspace.
From the first upload to the recipient's download, every step runs inside one case with one audit trail. No hand-offs between a PDF editor, a spreadsheet tracker, and an email client.
Accept a person once. Every file in the case follows.
Fast Track groups a person's name, CPR, email, and phone into one identity dossier. Accept or skip it once and the pending mentions across every file in the case are decided. Reviewers work from the keyboard.
- Validated ID patterns first, then a local Nordic entity model, then EU-hosted AI
- Policy packs for litigation, subject access, Danish access to documents, HR, and clinical files
- Custom patterns and keyword lists for your own matter numbers and client names
All plans · Policy packs on Firm and Enterprise
Fast Track · identity dossier
- NameMette Nielsen×9
- CPR120384-••••×2
- Emailmette.n@…×3
- Phone+45 •• •• •• 18×1
One decision applies to every pending mention in the case.
Black it out, or keep the story readable.
Set each category to redact or pseudonymize. Pseudonyms stay consistent across the case, so Person 1, Email 1, and Address 1 always belong to the same person. Magic Redact takes a plain-language instruction, asks when it is ambiguous, and turns it into rules you can review.
- Redact and pseudonymize in the same pass
- Scanned pages are read with OCR, and boxes are burned into the page image
- PDF, Word, Excel, PowerPoint, email with attachments, and images in; native Word and Excel out on request
All plans · Magic Redact from Pro
Magic Redact · instruction
Redact salary figures and bank details in the HR annex.
Question back: Should bonus amounts count as salary?
2 rules ready for review
Pseudonymized output
[Person 1] wrote from [Email 1] and asked for payment to .
Ship a bookmarked, Bates-numbered binder.
Build volumes with a cover page, table of contents, exhibit stamps, PDF bookmarks, and Bates numbering. Log privilege decisions as you review and export the log with the pack.
- Privilege log with basis and decision, exported as CSV
- Exemption schedule for Danish access requests and DSAR responses
- Four-eyes approval before export. Nobody approves their own release.
Firm and Enterprise
Legal binder · table of contents
- Tab 1Engagement letterND-000001
- Tab 2Board minutes, redactedND-000014
- Tab 3Email thread with the supplierND-000031
- Tab 4Privilege logND-000047
Privilege decisions travel with the binder.
Hand it over through a portal, on the clock.
The production portal gives the recipient a revocable link that expires, a burned-in watermark, and a download log with file hashes. Statutory clocks count Danish FOI working days and the GDPR one-month DSAR deadline, so the team sees what is due before it is late.
- Recipients accept your terms before the first download
- Deadline cockpit with owners and risk across every open case
- Tamper-evident QA certificate for each released document
Firm and Enterprise
Production portal
- Link expires
- in 14 days
- Watermark
- CONFIDENTIAL
- Bates range
- ND-000001 to ND-000212
- Downloads
- 3, hashes logged
Statutory clock
And the rest of the platform
- Conversation RedactTeams, Slack, and WhatsApp exports, captions, and meeting audio. Beep, silence, or voice morphing, with speech transcribed in the EU.
- Outbound GuardAn Outlook add-in that checks each send for CPR numbers and personal data and SoftBlocks by recipient type.
- Prompt GuardA free browser tool that wipes personal data before anyone pastes text into an AI chat.
- Detection30 built-in categories including Nordic national IDs, health data, and privilege markers, plus your own patterns.
- Audit and evidenceAn exportable audit log of every detection, decision, and download, and QA certificates per document.
- Retention and keysRetention per case with automatic purge, and per-document envelope encryption with Azure Key Vault BYOK on Enterprise.
- API and webhooksA REST API and HMAC-signed webhooks to connect releases to your own systems.
- Academy and BenchmarkGuided walkthroughs inside the app, and a benchmark that scores your current tool before you switch.
- SharePoint
- iManage Work
- HighQ
- Datasite
- KMD WorkZone
- KMD Nova
- cBrain F2
- Acadre
- SBSYS
- GetOrganized
- S3
- Outlook
Firm includes SharePoint. Enterprise adds every connector, plus private connectors that run inside your own network. Datasite, cBrain F2, Acadre, SBSYS, and GetOrganized are in beta.
Security and governance
The controls your CISO and DPO will ask for. Already there.
Northdocs runs on a European stack end to end: Danish company, Frankfurt hosting, EU AI endpoints. The PDF engine has no internet egress at all.
- Single sign-onSAML single sign-on, plus EASIE for Danish public sector.
- Ethical wallsMatter-level isolation so conflicted teams never see a case.
- Approval workflowsFour-eyes release with named reviewers and approvers.
- Bring your own keyPer-document envelope encryption with Azure Key Vault BYOK.
- Audit exportEvery detection, decision, and release in an exportable audit log.
- EU-only AIOpen-weight models on OVHcloud AI Endpoints. The first pass runs locally inside the engine.
Sectors
Built for the teams who carry the liability.
Procurement
Clear vendor review in weeks, not quarters.
Everything your security, legal, and procurement teams need is published. Take the pack, fill your questionnaire from ours, and talk to us only about what is specific to you.
Open the Trust CenterSOC 2 and ISO 27001: ask legal@northdocs.com for the current status letter.
From briefing to rollout
Measure it before you sign.
The Redaction Benchmark scores your current tool against difficult fixtures and a Northdocs baseline. Then your team runs real cases in the pilot. You decide on evidence, not on a demo.
- Step 1BriefingYour workloads, your risk profile, and a live run on a sample pack.
- Step 2BenchmarkScore your current tool against difficult fixtures and a Northdocs baseline.
- Step 3PilotA named team works real cases for 30 days with every feature except SSO and customer-managed keys.
- Step 4RolloutEnterprise agreement, policy packs per department, and onboarding with our team.
Enterprise agreement
One agreement. Every module. Your terms.
- Scales to 1,000 named users
- Invoice billing, purchase order, Net 30
- SLA by written agreement
- SSO, connectors, and ethical walls
- Outbound Guard included
- Unlimited meeting audio
Team plans
A single department or practice group?Starter, Pro, and Firm from 19 € per user per month, with a 30-day trial and no card.Compare team plansQuestions teams ask before they switch
Straight answers on accuracy, permanence, residency, and trial access.
Will AI miss personal data?
Built-in checks catch structured IDs first (email, phone, CPR, IBAN, and more). AI name recognition covers names, organizations, and addresses. You review identity dossiers before apply. On the standard PDF apply path, verification rejects the export if unexpected survivors remain. Native Office formats and some binder or acknowledged-unredacted exits have separate rules.
Is the data really gone from the PDF?
Northdocs removes content from the PDF stream, not with a cover-up overlay. Boxes that cover scans are burned into the page image. After apply we re-extract text and scan leftover bytes. On the standard PDF apply path, export stays blocked until verification finds no unexpected survivors. Native Office formats and some binder or acknowledged-unredacted exits have separate rules. Prefer a verified PDF when you need that guarantee.
Where is our data stored?
Customer documents are hosted and processed in the EU (OVHcloud Frankfurt), and production AI runs on OVHcloud AI Endpoints in the EU. Sign-in and payments use vendors covered by standard contractual clauses, all named on the subprocessor list. The Trust Center covers Security, Architecture, AI Policy, the DPA, and the security questionnaire.
Can we run Northdocs with AI switched off?
Yes. An administrator can disable AI for the whole organization. Northdocs then sends no document text, audio, or clipboard content to any AI provider, and detection runs on the platform's own detectors with human review and the same fail-closed verification. When AI is on, production inference runs on OVHcloud AI Endpoints in the EU. Details are in the Enterprise AI Policy.
Which systems can it connect to?
SharePoint, iManage Work, HighQ, Datasite, S3-compatible storage, and the Danish case systems KMD WorkZone, KMD Nova, cBrain F2, Acadre, SBSYS, and GetOrganized. Private connectors reach on-premises systems from inside your network. Firm includes SharePoint; Enterprise includes all connectors. Some are in beta, and Architecture shows the data flows.
Do we need a credit card for the trial?
No. The 30-day trial includes every feature except SSO and customer-managed keys, so your team can evaluate Fast Track, binders, and verification on real workloads. After the trial, pick how you pay: Starter, Pro, or Firm on card checkout, or Enterprise invoice billing (purchase order, Net 30) with no card. Outbound Guard only is a lighter plan on Billing if you do not need Cases. If you do not subscribe, the workspace locks. There is no free forever plan.
How does pricing work?
You pay per named user each month, in DKK or EUR. Each Cases plan includes a monthly page allowance for the workspace. Unused pages do not roll over, and we do not auto-bill overages. Pricing lists the seat prices. Alternatives compares tools.
What about Outlook or Microsoft Purview?
Outbound Guard warns or SoftBlocks in Outlook at send time when it can run. If the add-in does not run, Outlook can still send. It complements Microsoft 365 DLP. It is not a Purview or mail-flow hard block. DPIA and accountability exports exclude message bodies and raw CPR. Cloud scan and optional intent AI process compose text in Northdocs when enabled; that is detection processing, not long-term body storage. See the Outbound Guard product page.
Bring a case you already released. We will show you what survived.
In a 30-minute briefing we run a released PDF through verification and walk your team through the report, line by line.
Prefer to start hands-on? Start a 30-day pilot
Talk to our enterprise team
Tell us about your workloads and we will set up a briefing with a live verification run.
Email sales@northdocs.com