What happens to a document you scan.

Last updated 7 September 2026. Plain description of the actual behaviour, not a template — you can check every claim against the source.

Document X-Ray is a service operated by Clarion Technologies LLC. Where this page says "we", that is who it means.

The short version

• Your file is deleted as soon as the scan finishes. It is never stored.
• The report derived from it is deleted 60 minutes later.
• We never train anything on your documents, and never sell or share them.
• No analytics, no trackers, no advertising pixels, no third-party fonts or scripts. The page you are reading loads nothing from another domain.
• If none of that is enough, run Document X-Ray on your own machine. The scanner opens no network connection at all.

What we receive

When you scan a document we receive the file itself, your IP address, and the time of the request. That is all your browser sends us, because we ask for nothing else — there is no account, no name, no payment detail.

What happens to the file

It is written to a temporary directory, opened, analysed, and deleted in the same request. The original never reaches long-term storage. What survives the request is only what the scan produced:

• the report page, including images of your pages and the recovered text;
• the sanitised copy of the document, if the format supports one;
• the visible text extract;
• the findings as JSON.

All four are deleted 60 minutes after the scan. The link to a report is an unguessable random id and is not indexed by search engines, but anyone holding that link can open the report until it expires. Treat it as you would any private link.

What we log

One line per scan, containing the timestamp, your IP address, the scan id, the SHA-256 hash of the file, the verdict, the number of findings, and whether the scan came from the website, the batch page or the API. The log never contains the contents of your document — a hash cannot be turned back into a file. This log is what makes the audit trail useful and is kept until deleted by us.

The contact form

If you leave an email address we store that address, whatever you typed in the note field, your IP and the time. We use it to reply to you. It is not added to any marketing list you did not ask for, and it is not passed to anyone else. Ask us and we will delete it.

Cookies

One cookie, and only if you unlock batch scanning with a Team access code. It records that the code was accepted so you do not have to retype it. It contains no personal data and expires after thirty days. There are no other cookies.

Third parties

The website is served from a hosting provider, which processes requests on our behalf and sees IP addresses in its own logs. If we have configured email notification for the contact form, an email provider handles that message. Nothing else — no analytics service, no CDN font, no tag manager. Your documents are never sent to any third party, including any AI provider: the scanner is ordinary code, not a model.

Running it yourself

The same software can be installed inside your own network. In that arrangement we receive nothing at all, because there is no request to us. If your documents are confidential or subject to an NDA, this is the option to take.

Getting in touch

Questions, deletion requests, or anything else: hello@documentxray.com. The data controller is Clarion Technologies LLC, which operates this service.