Privacy & security

This page provides practical guidance for safe usage. Exact technical controls depend on your environment and policies.

Official legal and trust resources

For contractual, privacy, and security/compliance information, refer to:

• Legal Center: legal.prudai.com
  • You can find official legal documentation and original PDFs, such as:
    • NLdigital Terms 2025
    • Privacy Statement
    • Data Pro Statement (Data Processing Agreement)
    • Fair Use Policy
• Trust Center: trust.prudai.com
  • You can find security and compliance information, such as:
    • security commitments and overview
    • controls catalog (/controls)
    • certifications/compliance status
    • subprocessor overview
    • security/privacy FAQ (/faq)

How Prudai protects your data

• SSO required: access always goes through Keycloak SSO (https://login.prudai.com). There is no anonymous access to product data.
• Organization isolation: data is partitioned per organization. You can never see or search data from another organization, including via shared models or search features.
• Encryption: all data is encrypted in transit (TLS) and at rest.
• EU hosting: production data and AI processing run inside the EU. Our infrastructure and LLM subprocessors are selected to keep data within the EU (including Hetzner DE/FI, Vertex EU, and Azure OpenAI Sweden Central).
• Subprocessors: the current list of LLM and infrastructure subprocessors is published in the Trust Center.

Basic safety rules

• Upload only documents you are allowed to handle (confidentiality, GDPR, professional secrecy).
• Manage project collaborators deliberately (share with the minimum necessary people).
• Do not paste real secrets into prompts (passwords, tokens, private keys).
• Review exported files (Word/PDF) before sharing.

Roles and access

Roles commonly include:

• USER
• OWNER
• ADMIN

Roles affect which administrative actions you can perform (e.g. managing org prompts or creating an organizational KB). Roles operate within your organization; they never grant access to data outside your organization.

Knowledge settings (local preference)

The Knowledge page is a user preference that restricts what the assistant may use. Note:

• it is not the same as access control,
• it is stored locally in your browser.

Word add-in

In Word the app runs in a task pane (iframe) and sign-in typically uses an Office dialog. Be mindful of:

• organization policies around add-ins,
• document size limits (full-document text has a hard max).

More: Word add-in.