We don't want
your data.

To analyse your audit and generate your regulatory documents, we use Mistral AI- our generative AI model provider (GPAI). They produce the summaries, recommendations, and narrative content of your documents.

Before sending anything to Mistral, we apply automatic pseudonymisation: emails, phone numbers, SIRETs, and IP addresses are replaced with neutral tokens (EMAIL_1, PHONE_2…). Mistral never sees your direct identifiers.

The business content of your questionnaire (sector, AI system uses, organisational context) is necessary for generation- Mistral does access this. That's the inherent trade-off of using an external LLM. We'd rather tell you clearly than bury it in the terms of service.

You decide, audit by audit, whether your answers are sent to the AI: this option is off by default. Without it, nothing is sent to the AI: the analysis is written locally with the same deterministic scoring engine, and your “Other” answers are not interpreted automatically (they count with a neutral value in the score). When you turn it on, the audit's answers are processed by Mistral AI in the European Union and are not used to train its models.

The guided chat (paid plans) only sends to the AI what you type in reply to a multiple-choice question and, if you enter it, the description of your system. Clicking sends nothing and you can decline before you start: the classic form stays available. These texts are processed by Mistral AI in the European Union and are not used to train its models. E-mails, phone numbers, SIRET numbers and IP addresses are masked automatically; do not enter people's names or addresses.