This is how it is built and runs today; where something is a contractual commitment rather than a deployment fact, it says so.
Files, results and the models fitted on them are stored and processed on Azure in the EU. The analysis agents call LLM sub-processors; their region and their no-training, zero-retention terms are fixed in your agreement. Raw files move only under a signed agreement, which is why the contact form takes no uploads.
Your data lives in your own workspace, owner-scoped at the storage layer: isolated per tenant, and a request for another tenant's data behaves as if it does not exist. Access is invitation-gated.
The shared materials library holds public data only and fails closed. Your data sits on a separate plane with no merge path into it — by design, not by policy.
Your counsel can read the data terms before anything moves.
Contact us