Salta al contenuto
Pillar 02 · Compliance & control

Every interaction tracked, anonymised, defensible

Security and compliance are not an add-on module: they are the mandatory path every request goes through before any data leaves the company.

Full tracking

Every prompt, attachment and search is recorded with a SHA-256 cryptographic fingerprint, model used, risk classification and outcome. Plaintext content isn't needed to prove what was sent and when.

Document anonymisation

Detection of names, contacts, tax codes, IBANs and other identifiers in documents before sending, with consistent pseudonyms that preserve the meaning of the text and explicit user confirmation.

Per-user control gate

Area permissions, spending limits, company policies and protection against attempts to bypass system instructions: four checks that every request goes through.

Data residency

The hosting region is both a model attribute and a routing criterion: an area can be configured to use only providers hosted in the European Union.

Available controls

Double-consent opt-in encryption

Storage of plaintext content is disabled by default. When needed, it is enabled with AES-256-GCM encryption and the joint consent of the administrator and the data protection officer.

Configurable retention

Separate retention periods for metadata and content, configurable per area and applied automatically.

Company AI policies

Informational rules that can be enabled individually and are accessible to users directly from the chat, at the moment they write.

Federated access

Single sign-on with Microsoft Entra ID, Google Workspace and Okta; two-step verification for email access. Revoking the corporate identity revokes access.

Shared responsibilities

Artiplane provides the control tools — tracking, anonymisation, policies, permissions, budgets and provider selection. The client company remains the data controller and defines purposes, legal bases, retention periods and permitted use cases. This page describes features available in the product and does not constitute a certification or legal advice.

The path toward independent attestations (SOC 2, ISO 27001, ISO 42001) is underway: up-to-date status and technical documentation are available on request for enterprise evaluations.

Learn more: AI Act obligations for companies, anonymising documents, prompt audit trail.

Want to see Artiplane on your own use cases?

A 30-minute demo on your real scenario: routing, budget per business area and full interaction tracking.

Request a demo