Security & GDPR

Confidentiality
by architecture.

Self-hosted on your hardware or in the EU cloud with a DPA. Client data never leaves your control — and is never used to train AI.

Built for professional secrecy

Professional secrecy first

Confidentiality isn't an add-on: self-host, or EU cloud with a separate confidentiality undertaking for everyone involved.

Your infrastructure, your keys

Run the engine on your hardware with local storage — or our EU cloud with a DPA and encrypted object storage.

No training on your data

Client content is processed only to deliver the service — never to train shared models.

DPA & GDPR

Data-processing agreement (Art. 28 GDPR) template, EU standard contractual clauses for any third-country transfer.

Matter & client isolation

Access scoped per matter and per user across every read path — fuzz-tested for zero leaks between mandates.

Every answer cited

Answers cite the exact page. Fabricated citations are dropped before output — protection against hallucination.

Built for confidential work

Serious, secure, verifiable

Sigmabrain is built for professions where confidentiality is law, not preference.

Self-hosted or EU cloud

Your hardware or EU hosting with a DPA. Client data never leaves the EU.

No training on your data

Your knowledge never trains shared models. Ever.

Every answer cited

Page-level citations — verify in one click before anything goes into a brief.

Professional secrecy by design

Architecture for confidentiality holders — no third party processes client data.

Let your DPO talk to us.

We know professional secrecy, DPAs and EU hosting — and we speak your compliance team's language.

Subsumio Sicherheit & DSGVO — Vertraulichkeit durch Architektur — Sigmabrain