Built for processes you have to be able to explain.
RunOCR handles documents and photos that matter to your business. Here is how we protect them, and how we keep AI from making decisions on its own.
Sensible defaults, everywhere.
The app, API and webhooks are served only over HTTPS.
Credentials for your APIs are encrypted and only added to outgoing requests. They are never shown again after saving.
Passwords are hashed with bcrypt. API keys are stored as hashes and shown only once.
New accounts confirm their email with a one-time code before they can sign in.
Files are only served to your signed-in account, or to a reviewer through their private review link.
Deleting your account removes workflows, runs, records and files, and cancels billing.
AI proposes. Rules and people decide.
Vision and AI steps only produce typed data. Every business action happens through a rule you can read or a person you chose.
- Business-grade model APIsRunOCR uses leading vision-language models through their business APIs, which do not use API data for training. Images are sent only while a step runs.
- Confidence on every resultEach extraction carries a confidence score. Use a confidence check to send uncertain results to a person.
- Human review built inPause any run for approval, correction or more evidence. Reviewers act through a private link.
- Full audit trailRuns keep their inputs, step outputs, decisions and reviewer actions, for as long as your plan's history allows.
Outbound calls with guard rails.
- Outbound HTTP steps can't reach private network addresses, so a workflow can't be used to probe internal systems.
- Outgoing webhooks can be signed with HMAC-SHA256 so your systems can verify they came from RunOCR.
- Inbound webhook URLs are secret per workflow and can additionally require a shared header.
- Published versions are immutable: what runs in production is exactly what you reviewed.
Have a security question or found an issue? Email info@xappdigital.com. See also our Privacy Policy.
Build your first visual workflow today.
Start from a template, upload a real photo and see each step's result in minutes.
No card needed · 3 workflows and 100 runs free · Cancel anytime