Nutrient DWS Data Extraction API is built with enterprise security requirements in mind.
- No persistent storage — Uploaded files are never written to persistent storage and are discarded after processing. Extracted content is returned in the response and not retained.
- Encryption in transit — All API communication uses HTTPS with TLS encryption. Unencrypted HTTP requests are rejected.
- Secure payments — Billing is handled through Paddle, a PCI-compliant payment processor.
For more information, see the Nutrient security overview (including SOC 2 Type 2 compliance) and the DWS Processor security page, which covers the shared DWS infrastructure security practices.
Also refer to the getting started guide, API overview, Data Extraction API overview and pricing and privacy pages.