Your supplier invoice has a name, GSTIN and price on almost every row. Before you send that pile to an extractor, you want to know where it will go. I need to give you the current answer, not the answer I would like to offer later.
Correction, 6 October 2026: an earlier version of this page said India-hosted and single tenant. That was wrong. EntryLedger's application server is in Google Cloud US Central. Workspaces share the hosted service, with tenant-scoped records and API access. I have corrected the site and privacy policy. If your company requires India-only residency or dedicated infrastructure, do not treat the current self-serve product as meeting that requirement.
Tenant isolation controls which workspace can read a record. It does not mean a separate machine per customer. Nor does a server region settle the location of third-party extraction or backups. Check the whole processing chain before sending supplier paper.
What scans carry
Supplier names, addresses and financial identifiers deserve care. Do not assume a GSTIN or a business invoice can never contain personal data. Ask your legal team which duties apply to your suppliers and documents.
Digital text and local OCR rules run before the vision-model fallback. Some pages are sent to a third-party vision model. This is third-party processing, not processing only on the application server. EntryLedger does not train shared models on your documents; the model provider's API data-handling terms matter too.
Review drafts and retained export files also contain invoice data. Clearing a draft does not immediately remove earlier backups. Extraction caches can retain OCR or model responses. Our privacy policy describes the current retention and staff-managed deletion process.
On-prem
The product you can sign up for today is hosted. There is no self-serve on-prem appliance or dedicated India-hosting option. If your procurement checklist requires either, speak to us before uploading. A possible future arrangement is not a shipped product.
What we will not do
I will not turn tenant isolation into a residency promise. I will not call a deployment ISO 27001 or SOC 2 certified without evidence. A control that works in our tests is not a certification, and a supplier invoice that passes arithmetic is not proof of live GST registration.
The bake-off question
Ask where the application, extraction provider, caches and backups run. Ask who can read a draft, who can change a supplier master, and what remains after a deletion request. Then match those answers to your company's requirements. If the answers do not fit, stop before sending the first scan.
- EntryLedgerPrivacy policy
Current hosting, processing, retention and deletion disclosures.
- EntryLedgerTerms
Service scope and customer responsibilities.
Where are scans stored?+
The application server is in Google Cloud US Central, not India. Workspaces are tenant-isolated, not dedicated servers. See /privacy for processing and retention.
Shared models?+
EntryLedger does not train shared models on your documents. Some pages are sent to a third-party vision model under its API data-handling terms. That is processing by a third party outside our infrastructure, and the provider can change; ask us which one is live before you upload.
On-prem?+
On-prem and dedicated India hosting are not available through self-serve signup. If either is required, talk to us before uploading.