IT · Security · Privacy
A document assistant your security team can approve.
The question is not whether AI is useful, it is where the documents go and who can read what. Written, verifiable answers, and an architecture note handed over before signature.
The technical file, in short
- 01
Per-customer isolation
Dedicated instance, database and vector index. No cross-processing between organisations.
- 02
One outbound flow
The model call, limited to the passage needed. A locally executed model is supported where no external flow is acceptable.
- 03
Traceability
Audit log of logins, API-key access, settings changes and deletions.
- 04
Access control
Two customer-side roles enforced by the server, TOTP two-factor authentication, scoped API keys with rotation and revocation. Technical administration of the instance stays with us.
Governance
What your management, your DPO and your accountant will ask for.
- Two roles on your sideManager and user — enforced server-side, not just in the interface. Technical administration stays with us.
- Two-factor authenticationTOTP with recovery codes, resettable if someone gets locked out.
- Audit logLogins, API-key access, settings changes, document deletions.
- Scoped API keyschat / documents / rag scopes, rotation and revocation, per-key statistics.
- Signed webhooksHMAC-SHA256 signature, three attempts, delivery history you can inspect.
- Exit rightsYour documents, corpus and history stay exportable. The corpus belongs to you.
- 14:32:07managerapi_key.revokedhk_18bcd7b…
- 14:04:19systemdocument.indexedWarranty procedure v4
- 11:47:52userchat.message.created3 sources cited
- 10:12:38managerdata_source.syncedSharePoint — Legal
- 09:03:40Hekzasettings.updatedrag.topK 5 → 6
- 08:55:02userauth.mfa.verifiedTOTP
Where to start
The documentation AI diagnostic
€1,500 excl. VAT3 days · delivered within a week
We do not run free demos on your documents: we run a paid diagnostic, fully deducted from the project if you sign within 30 days.
Book 20 minutes- A map of your knowledge sources: where the information lives, who maintains it, what is out of date.
- Three use cases quantified in hours and euros, ranked by effort versus gain.
- A real mock-up on your own documents: 20 to 50 of your files indexed, 10 questions from your teams, the answers obtained and their sources.
- An architecture and compliance note: where data lives, what goes to the model provider, what does not.
This type of diagnostic is eligible for several French public schemes supporting digital and AI transformation — we tell you which ones apply to your case.
Twenty minutes is enough to know whether this is for you.
We show you the tool on a demo corpus close to your line of work: a real question, its sourced answer, a question with no answer, and the cost dashboard. No commitment.