Your documents stay yours

Each account has its own workspace in the search index. The workspace is determined by the server from your session, never from a value sent by the browser: every read, search or deletion is filtered on your workspace. Another account can't see, query or open your documents, even if it knows their identifier.

Files, database and index are hosted in the EU. AI models are called in European regions (Paris, Frankfurt); documents are read by Mistral AI, in France.

Your documents and questions are only used to answer you. The model providers we use (Anthropic through Amazon Bedrock, Cohere, Mistral) don't use them to train their models.

• Encrypted connections (HTTPS) end to end.
• Session held in a secure cookie, cross-site request forgery (CSRF) protection on every write.
• Email address verified with a code before a workspace opens.
• Every file is checked on arrival: its content must match its extension.

Deleting a document erases its passages and pages from the index; the original file is erased as soon as no workspace uses it anymore. From Account, “Delete data” erases documents, index, conversations and connected sources while keeping the account; “Delete account” erases the account and all its data, credit history included. Only the activity log and invoices remain, which we are required to keep.

Write to [email protected]. We acknowledge receipt within 72 hours and keep you posted until it's fixed.