The category of personal data is fully controlled by the customer (the Data Exporter.) DocSpring (the Data Importer) has no visibility or control over any of the personal data that is transmitted to and from our service. Personal data can include (but is not limited to): Full name, address, phone number, email, date of birth, financial information, healthcare information, and any other personal information that the customer chooses to send to DocSpring in order to fill out a PDF form.

DocSpring provides a service to create and manage PDF templates and fill out PDF templates via an API request. Customers transmit personal data to our servers via an API request (encrypted over an SSL connection.) DocSpring stores this data in our database (encrypted at rest), and then runs a PDF processing job to fill out a PDF template with the personal data. The PDF is then stored in an AWS S3 bucket (also encrypted at rest.) The customer can then make a final request to download the generated PDF, which contains the personal data. The customer may also delete all personal data from our system (including the generated PDF) by making an API request to "expire" the submission. The customer may also set an eviction policy on the template to automatically delete all personal data after a set period of time (e.g. 24 hours.)

Customers of DocSpring.