Where your data lives
Storage and processing in the European Union. Uploaded documents, generated questions and technical logs do not leave that area. Ultimate lets you contractually pin a specific region.
Security
Security and sovereignty
What we do with your documents, where they live, and what you can require from us contractually.
Your teaching material is intellectual capital. We treat it as confidential data that belongs to you, and we commit to that in writing.
No training on your content
Neither your documents, nor your questions, nor your conversations with the assistant are used to train or fine-tune a model. That prohibition is passed on to our inference subprocessors.
Encryption and isolation
Traffic encrypted in transit and data encrypted at rest. Every account and organisation gets an isolated space; access to any content always goes through a server-side permission check.
Access control
Sign-in with e-mail and password (reset through a single-use link) or with a Google account, with optional two-factor authentication (TOTP). Institutions can enable Microsoft Entra SSO: we verify the tenant and its domains before any account is linked. Inside an organisation, roles separate owner, manager and member, and sharing is set project by project.
Subprocessors and DPA
On request we provide a GDPR-compliant data processing agreement, an up-to-date list of our subprocessors and a description of any transfers. Changes are notified.
Retention and deletion
You delete a document, a folder or an account whenever you decide; deletion propagates to derived data (read pages, questions, indexes). Organisation deletions go through a configurable grace period.
Controlled deployments
For institutions that cannot host with a third party, Ultimate offers deployment in a virtual private cloud or on your own infrastructure, with the same product.
A compliance question, a security questionnaire to fill in, a DPA to sign?