# PaperOffice — Document Management (DMS)

PaperOffice by PaperOffice holds a panel rating of 3/5 from 6 AI judges (category median 2/5), as of 2026-10-21. Provenance: provenance unknown; sovereignty: not determined.

- Vendor: PaperOffice (https://www.paperoffice.com)
- Category: [Document Management (DMS)](https://whats-best.ai/software/document-management.md)
- Provenance (editorial classification): provenance unknown
- Canonical page: https://whats-best.ai/software/document-management/paperoffice
- Alternatives: https://whats-best.ai/software/document-management/paperoffice/alternatives ([markdown](https://whats-best.ai/software/document-management/paperoffice/alternatives.md))
- Data as of: 2026-10-21 · evaluated 2026-10-21 · oldest source captured 2026-10-20

**AI-generated.** Every score, rationale and verdict here is written by a panel of AI judges from public evidence — an analysis, not a hands-on test. Every fact quotes the vendor page it was read from. No score can be bought. How scores are made: https://whats-best.ai/methodology

## At a glance

- Vendor: PaperOffice
- Headquarters: Not stated on the vendor’s pages as of 20 Oct 2026
- Data hosting: Default not stated; pages mention the EU [S4]
- Free plan: Not stated on the vendor’s pages as of 20 Oct 2026

## The panel's verdict

PaperOffice is a document management system from PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. of Pamplona, Spain, a brand founded in Germany in 2002. Capture and indexing is the strongest area, scored 8-9: intake runs through scanner SFTP, watched folders, an IMAP mailbox connector, upload and a REST API, OCR reads more than 120 languages, and e-invoices in XRechnung, ZUGFeRD and Factur-X validate against EN 16931. Versioning and permissions and search and portability follow, anchored by an audit trail whose entries can be changed or deleted neither in the app nor via the API, and a SHA-256 checksum per version. Pricing transparency is the weakest criterion at 3: only per-page OCR prices ($0.01 basic, $0.02 premium, $0.03 ultra) and a credit-billed API are public. Sovereignty shows the widest spread, 4-6, between the stated own EU data center with no US cloud and a San Jose sales-and-support office, AI assistants that can search the archive, and no public information on subprocessors or ownership; the flagged split check flagged none. Persona-weighted totals run from 5.7 to 6.6.

**Speaks for it:**
- An audit trail whose entries can be changed or deleted neither in the app nor via the API
- Every revision kept as its own version with a SHA-256 checksum, sealed documents under WORM protection until the retention term ends
- Classification determines document type, sender and direction, proposes the matching retention rule, and routes uncertain values to a review list, with duplicate detection documented
- Search across full text, OCR text and semantics at summary, page and paragraph level, restricted to workspaces the user is authorized for
- A REST API on every plan with published endpoints and limits, signed webhook events with retries, and MCP tools for Claude, ChatGPT and Cursor

**Held against it:**
- Only unit prices are public — OCR at $0.01 per page for basic, $0.02 for premium and $0.03 for ultra, plus a credit-billed API — while the plan names Basic, Premium, Ultra and Corporate appear with no per-user or per-month price
- OAuth sign-in for Microsoft 365 mailboxes is not supported yet, per the captured pages
- Automation is rule-based Workflow Agents for intake, follow-up and filing, with no public information on graphical workflow modelling or ERP and DATEV handover
- GoBD-relevant archiving rests on the vendor's own pages, with no public information on an auditor's report such as IDW PS 880, a Z1–Z3 export or a sample Verfahrensdokumentation
- No public information on subprocessors, a data processing agreement or the ownership behind the Spanish contracting entity, while a US office in San Jose handles sales and support

**Best for:**
- You need audit-resistant recordkeeping under German retention terms — WORM until term end, retention per document type with legal basis, a legal hold and a logged release — for six-, eight- and ten-year obligations
- You want files kept on your own NAS or server over SFTP while search and AI processing run in the vendor's EU data center, accepting that index and metadata stay in that data center
- You integrate programmatically — the full REST API is on every plan billed in credits, webhook events are signed with retries, MCP tools expose the archive to Claude, ChatGPT and Cursor, and the quickstart downloads free without registration
- You receive German e-invoices and must validate them — XRechnung (UBL and CII), ZUGFeRD and Factur-X are checked against EN 16931, with free tools to create and check them

**Avoid if:**
- You must put a budget on the table before committing — the public pages carry no per-user or per-month plan price, only per-page OCR units and credit-billed API use
- Your intake depends on Microsoft 365 mailbox sign-in — the captured pages state that OAuth sign-in, as with Microsoft 365, is not supported yet
- You need designed approval workflows that hand invoices over to DATEV or an ERP — the documented automation is rule-based Workflow Agents for intake, follow-up and filing
- You want an independently attested compliance archive before signing — the captured pages name GoBD as a regulatory reference and leave the final assessment to your tax advisor

## Scores by judge and criterion

Scores out of 5, each judge scoring independently against the published rubric (v1). "n/r" = not rated: the vendor publishes no price.

| Criterion | The GoBD Auditor | The Records Manager | The IT Integrator | The Mittelstand Owner | The Data Protection Officer | The Skeptic |
| --- | --- | --- | --- | --- | --- | --- |
| Capture, OCR & indexing | 4/5 | 4.5/5 | 4/5 | 4/5 | 4/5 | 4/5 |
| Versioning, permissions & audit trail | 3.5/5 | 3.5/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| Audit-proof archiving & retention | 3/5 | 3/5 | 3/5 | 3/5 | 3.5/5 | 3/5 |
| Document workflows & integrations | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 | 3/5 | 3/5 |
| Search, retrieval & exit | 3/5 | 3/5 | 3.5/5 | 3.5/5 | 3.5/5 | 3.5/5 |
| European sovereignty | 2.5/5 | 2.5/5 | 2.5/5 | 3/5 | 2.5/5 | 2/5 |
| Pricing transparency | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 | 1.5/5 |
| **Weighted verdict** | **3/5** | **3.5/5** | **3/5** | **3/5** | **3/5** | **3/5** |

### The judges

- **The GoBD Auditor** (v1.0): Has sat through tax audits on the company side and knows that "GoBD-konform" on a homepage proves nothing. Wants the auditor's Testat with its scope and date, archived documents that cannot change, retention per document type, and a Z3 export the tax office can read.
- **The Records Manager** (v1.0): Owns the filing plan and gets the call when a contract from 2019 cannot be found. Wants metadata that is set at capture rather than typed later, version history with restore, search that respects permissions, and a bulk export that keeps metadata and versions together.
- **The IT Integrator** (v1.0): Connects the DMS to the ERP, DATEV and Microsoft 365 and maintains it afterwards. Wants connectors with a stated scope rather than a logo wall, a documented API with webhooks, single sign-on, and a migration path in and out that does not depend on the vendor's services team.
- **The Mittelstand Owner** (v1.0): Runs a forty-person company and wants the paper out of the office and the invoices approved without chasing anyone. Reads for e-invoice intake, an approval workflow that works without a consultant, and a price for users, storage and modules before the partner visit, not after.
- **The Data Protection Officer** (v1.0): Knows the DMS ends up holding personnel files, health certificates and customer contracts in one place. Asks where the cloud edition stores them, which AI provider reads them during capture, who the subprocessors are, and how GDPR deletion is reconciled with retention duties.
- **The Skeptic** (v1.0): Has read "revisionssicher" on every DMS homepage and a Testat on almost none. Distrusts "AI-powered capture" without a validation step, "seamless SAP integration" without a scope, and "no vendor lock-in" from a vendor that documents no export — and treats "price on request from your partner" as an answer.

## European sovereignty — proven facts

Built only from facts on the vendor's own pages; a dimension we could not prove is left open, never scored as zero. Headline: not determined.

| Dimension | Finding | Points | Source |
|---|---|---|---|
| Legal entity | Not determined | — | — |
| Ownership | Not determined | — | — |
| Data residency | Not determined | — | — |
| Subprocessors | Not determined | — | — |

## Key facts

Each fact is the vendor's own statement, cited to the source page it was read from ([S*n*] → Sources).

**Compliance**
- Certifications: certified · in preparation [S13]
- Credentials encrypted: Credentials encrypted in storage mount; processing in own EU data center [S10]
- Data processing: yes · yes [S5]
- Datacenter brand origin: 24+ · yes [S2]
- Encryption: AES-256 · TLS 1.3 [S3]
- Encryption: yes · yes [S4]
- Encryption: AES-256 · TLS 1.3 [S5]
- Encryption: AES-256 · TLS 1.3 [S8]
- Encryption: AES-256 · TLS 1.3 [S9]
- Encryption: AES-256 · TLS 1.3 [S12]
- Encryption: AES-256 · TLS 1.3 [S13]
- Encryption transit: AES-256 · TLS 1.3 · yes [S4]
- GDPR: yes [S3]
- GDPR: yes [S6]
- GDPR: yes [S5]
- GDPR: yes [S7]
- GDPR: yes [S9]
- GDPR: yes [S11]
- GDPR: yes [S10]
- GDPR: yes [S12]
- GDPR footer: yes · certified · yes · in preparation [S2]
- GDPR HIPAA: yes · yes · yes · yes [S4]
- GDPR HIPAA: yes · yes · yes · yes [S8]
- GDPR HIPAA: yes · in preparation · yes · yes [S13]
- Gobd reference: GoBD named as regulatory reference [S8]
- Gobd statement: Vendor claims GoBD-relevant features; final assessment by tax advisor [S9]
- HIPAA: yes [S3]
- HIPAA: yes [S6]
- HIPAA: yes [S5]
- HIPAA: yes [S7]
- HIPAA: yes [S9]
- HIPAA: yes [S11]
- HIPAA: yes [S10]
- HIPAA: ready [S12]
- Hit traceability: yes [S13]
- ISO 27001: yes [S3]
- ISO 27001: yes [S2]
- ISO 27001: yes [S4]
- ISO 27001: yes · in_preparation [S5]
- ISO 27001: yes [S7]
- ISO 27001: yes [S11]
- ISO 27001: yes [S10]
- ISO 27001: zertifiziert [S12]
- ISO 27001: yes [S6]

**Data**
- Audit export formats: Excel · CSV · JSON · PDF · yes [S8]
- Import existing archive: SFTP · S3 · WebDAV · ZIP [S8]
- Importer: watched_folders · SFTP · S3 · WebDAV · ZIP · REST_API [S9]
- Processing purpose: Invoice data used only for the respective tool [S6]
- Retention event logged: WORM lifted after retention end; deletion manual; expiry logged as event [S9]
- Storage split local: yes · yes [S8]

**Hosting**
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Spain [S11]
- Data center: EU · yes [S5]
- Datacenter: own EU data center [S4]
- Datacenter: EU [S11]
- EU data center: no · yes [S8]
- EU datacenter: no · yes [S3]
- EU datacenter: yes [S6]
- EU datacenter: EU · yes [S7]
- EU datacenter: no · yes [S9]
- EU datacenter: Processing in PaperOffice's own EU data center [S10]
- EU datacenter: EU · yes [S12]
- EU datacenter: yes [S13]
- Germany location: Frankfurt am Main · Deutschland [S6]
- Legal entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spanien [S12]
- Locations: US location in San Jose handles sales and support [S11]
- Office location: Frankfurt am Main [S12]
- Partnerships: 2019 · 2024 [S13]
- Self hosted files: yes · EU datacenter [S9]
- Storage mount: yes [S3]

**Integrations**
- Access paths: REST API, MCP server, llms.txt [S11]
- AI assistant access: Claude · ChatGPT · Grok · Le Chat [S2]
- AI assistants: Claude · ChatGPT · Grok · Le Chat [S10]
- API: yes · yes · yes [S2]
- API: yes [S5]
- API all plans: yes · yes · yes [S7]
- API all plans: credits · yes · yes [S9]
- API availability: credits · yes [S13]
- API billing: credits · yes · yes [S3]
- API billing: credits · yes · yes [S4]
- API billing: Full API on every plan, billed in credits; key created in app after phone verification [S10]
- API full on every plan: yes · yes · yes [S8]
- API pricing credits: Credits · yes · yes [S12]
- Asustor partnership: 2024 · ASUSTOR [S5]
- Authentication: Bearer token auth with secret key and user token [S11]
- Comparison sharing: expiry · PIN · phone [S4]
- Connectors: SFTP · S3 · WebDAV [S2]
- Docs URL: paperoffice.ai/en/developer/ and api.paperoffice.ai/latest/docs/ [S11]
- Import jobs: Import jobs with progress query, file list and checkpoint retry [S10]
- Intake channels: scanner · watched_folder · email · upload [S2]
- Llms txt: llms.txt available for IDEs [S10]
- Mcp: Claude · ChatGPT · Cursor · yes [S3]
- Mcp: Claude · ChatGPT · Cursor [S2]
- Mcp: Claude · ChatGPT · Cursor [S4]
- Mcp: Claude · ChatGPT · Cursor [S5]
- Mcp: Mounts and imports available as MCP tools in Claude, ChatGPT and Cursor [S10]
- Mcp access: Claude · ChatGPT · Cursor [S9]
- Mcp clients: Claude · ChatGPT · Cursor [S7]
- Mcp search: Claude · ChatGPT · Cursor [S12]
- Mcp support: Claude · ChatGPT · Grok · Cursor · yes · yes [S11]
- Oauth: yes [S4]
- Qnap partnership: 2019 · QNAP [S5]
- Rest API: yes [S3]
- Rest API: yes · yes [S7]
- Rest API: REST API for creating mounts, import jobs and webhooks [S10]
- Rest API archiving: yes [S9]
- Rest API workspaces: create · change · upgrade · check access [S4]
- Scanner sftp: yes [S8]
- Search API: REST · yes [S12]
- Search endpoints: Volltext · hybrid · semantisch [S12]
- Sftp scanner inbox: yes [S2]
- Token scoping: user tokens scoped to granted areas at creation; secret keys server-side only [S11]
- Upcoming features: webhooks, publishable keys, Postman collection, cookbook [S11]

**Legal**
- Brand origin: 2002 · Deutschland [S12]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spain [S3]
- Contracting entity: Pamplona, Spain · PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. [S4]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spanien [S6]
- Contracting entity: Pamplona · PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Spain [S5]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spain [S8]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spanien [S9]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spain [S10]
- Contracting entity: PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. · Pamplona, Spain [S13]
- Copyright entity: 2002-2026 · PAPEROFFICE ENTERPRISE OPERATIONS, S.L.U. [S2]
- Founded: 2002 [S6]
- Founded: 2002 · Germany [S11]
- Founding: Deutschland · 2002 [S7]

**Pricing**
- Analytics AI plan gate: Corporate [S7]
- API credits: credits · yes · yes [S2]
- API included: yes · yes [S5]
- API on every plan: credits · yes [S10]
- No credit card: no [S4]
- Ocr basic: basic · 0.01 [S5]
- Ocr billing model: per_page · no · no [S5]
- Ocr premium: premium · 0.02 [S5]
- Ocr ultra: ultra · 0.03 [S5]
- Search depth plans: Volltext · OCR-Text · semantische Suche · Absatz-Ebene · Entitäten · Dateinamen · Metadaten [S12]
- Trial: yes · no [S2]

**Product**
- Access control: yes · yes [S7]
- Access request: yes [S3]
- Agent permissions: yes · yes [S4]
- AI assistant access: Claude · ChatGPT · Grok · Le Chat · yes [S4]
- AI assistant access: Claude · ChatGPT · Grok · Le Chat [S8]
- AI assistants: edit PDFs · e-invoice check/create · OCR from photos · deadline calculation · no [S4]
- AI ocr: yes · case_number · court · parties · deadlines · amounts [S2]
- API endpoint example: severity · require_review · /latest/analytics/audit-center [S7]
- Approvals: yes · yes · yes · yes [S4]
- Assistant no account trial: no [S12]
- Asustor partner: 2024 · ASUSTOR [S2]
- Asustor partnership: Sole official DMS partner for ASUSTOR [S10]
- Audit center purpose: Audit-Center lists AI findings from the Ultra analysis by severity with recommendation and review status [S7]
- Audit log: Audit trail with timestamp and person for revision-safe documents [S9]
- Audit proof delivery: yes [S2]
- Audit trail: viewed · exported · deleted · yes [S3]
- Audit trail: yes [S2]
- Audit trail: accesses · changes · level changes [S4]
- Audit trail immutability: no · app · api · no [S7]
- Audit user restriction: Read-only audit user restricted to one workspace possible [S9]
- Auditor access: yes [S8]
- Bounding boxes: yes [S5]
- Brand origin: Germany, 2002 [S3]
- Change history detail: revisionssichere Dokumente · user · field · time · old_value · new_value [S7]
- Chat agent search: yes [S12]
- Checksum versions: SHA-256 per version · per document type [S8]
- Classification: Automatic classification of document types [S2]
- Classification: document type · sender · direction · yes [S8]
- Classification suggests rules: Classification detects type, sender, direction and suggests retention rule [S9]
- Cloud storage support: S3-compatible storage with prefix filter; WebDAV from Nextcloud or ownCloud [S10]
- Confidence review: yes · yes [S2]
- Confidence values: yes [S5]
- Connector folder monitoring: Connectors watch folders on NAS, servers and S3 automatically [S10]
- Connector intervals: Interval from minutes to weeks, with runs per day/month shown before saving [S10]
- Connector sources: Connectors monitor sources via SFTP, S3, WebDAV, email (IMAP) and scanner inbox [S10]
- Control areas: 12 [S7]
- Custom terms whitelist: yes [S3]
- Deadline fields: Deadline type, due date, owner extracted as fields; shown in document view and timeline [S2]
- Document chat: yes [S2]
- Document types: Pleading · Court order · Judgment · Power of attorney · Fee invoice · Contract [S2]
- Download guide: API quickstart guide covering first request, tokens, limits, MCP [S11]
- Download language availability: yes · English · German · no [S11]
- Duplicate detection: yes [S2]

**Support**
- Academy webinar: 12:22 [S13]
- Trial: yes · yes [S3]

160 more facts on the canonical page: https://whats-best.ai/software/document-management/paperoffice

## Questions

### Is PaperOffice European?

Not determined: the vendor’s pages as captured do not say where PaperOffice is based.

### Where does PaperOffice store data?

The default storage location for customer data is not stated on the vendor’s pages as of 20 Oct 2026. The vendor’s pages mention the EU as hosting location, per [the vendor’s page captured 20 Oct 2026](https://whats-best.ai/evidence/9377).

### Does PaperOffice have a free plan?

Not stated on the vendor’s pages as of 20 Oct 2026.

### What are the best alternatives to PaperOffice?

As of 21 Oct 2026, the panel rates [AMAGNO (3/5)](https://whats-best.ai/software/document-management/amagno), [Doxis (3/5)](https://whats-best.ai/software/document-management/doxis) and [EASY Archive (2.5/5)](https://whats-best.ai/software/document-management/easy-archive) highest among the other 17 Document Management (DMS) products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is [AMAGNO](https://whats-best.ai/software/document-management/amagno) (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: [how scores are made](https://whats-best.ai/methodology#ordering). The full list, with European products first: [PaperOffice alternatives](https://whats-best.ai/software/document-management/paperoffice/alternatives).

## What this page leaves out

- 31 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 13 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 9 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 3 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material.
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 1 subprocessors fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material.
- 2 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown.

## Sources

- [S1] Vendor page: https://www.paperoffice.com (checked 2026-10-20)
- [S2] Legal notice — found from the homepage: https://paperoffice.ai/en/solutions/industry/ai-legal-law-firms-document-management/ (checked 2026-10-20)
- [S3] Privacy policy — found from the homepage: https://paperoffice.ai/en/solutions/risk/ai-data-protection-gdpr-compliance-pii-detection/ (checked 2026-10-20)
- [S4] Security / trust page — found from the homepage: https://paperoffice.ai/en/ai-workspaces-security-tiers-document-protection/ (checked 2026-10-20)
- [S5] Capture, OCR & indexing — found from sitemap: https://paperoffice.ai/en/ai-ocr-text-recognition-llm-document-digitization/ (checked 2026-10-20)
- [S6] Capture, OCR & indexing — found from sitemap: https://paperoffice.ai/de/tools/e-rechnung/ (checked 2026-10-20)
- [S7] Versioning, permissions & audit trail — found from sitemap: https://paperoffice.ai/de/ki-audit-center-compliance-protokollierung/ (checked 2026-10-20)
- [S8] Audit-proof archiving & retention — found from sitemap: https://paperoffice.ai/en/solutions/process/ai-audit-proof-archiving-compliance/ (checked 2026-10-20)
- [S9] Audit-proof archiving & retention — found from sitemap: https://paperoffice.ai/de/loesungen/prozess/ki-revisionssichere-archivierung-compliance/ (checked 2026-10-20)
- [S10] Document workflows & integrations — found from sitemap: https://paperoffice.ai/en/ai-connectors-integrations-api-interfaces/ (checked 2026-10-20)
- [S11] Document workflows & integrations — found from sitemap: https://paperoffice.ai/en/downloads/api-quickstart/ (checked 2026-10-20)
- [S12] Search, retrieval & exit — found from sitemap: https://paperoffice.ai/de/ki-smart-search-intelligente-suche-semantische-dokumentensuche/ (checked 2026-10-20)
- [S13] Search, retrieval & exit — found from sitemap: https://paperoffice.ai/en/ai-smart-search-semantic-document-search/ (checked 2026-10-20)

---

Cite as: whats-best.ai, "PaperOffice — Document Management (DMS)", AI panel analysis, as of 2026-10-21. https://whats-best.ai/software/document-management/paperoffice

Corrections: https://whats-best.ai/correct/896?target=page