Slimaco Security

You know where your data is and where it goes

Company knowledge is stored in the EU. Only what’s needed for the answer reaches language models, and important agent actions wait for human approval.

Data path

What happens to an employee’s question

Some selectable models, including Claude, process data globally. The organization’s admin enables them. Actions that require consent wait for a person, and each one is logged.

Knowledge stored in the EU

Documents, vectors and the knowledge base are stored in the European Union, with backups in another EU region.

A clear data path to models

The model receives the question and the knowledge fragments needed for the answer. By default, the platform picks a model from those running in Microsoft Azure in the EU data zone, including selected DeepSeek and Mistral models. Some selectable models, including Claude, process data globally. Search in company knowledge runs on Slimaco infrastructure.

Data isn’t used for training

Model providers don’t use data sent via the API to train their models.

Personal data masking

Before a question reaches the language model, we mask recognised personal data such as national ID numbers, account numbers and e-mail addresses.

Document-level permissions

Employees and assistants see what they are entitled to, at the level of roles and individual documents.

People make the decision

You approve agent actions on every run or approve them once for a set period. Consent is a built-in step of the procedure.

Your AI via MCP Coming soon

When an employee uses Slimaco knowledge in ChatGPT, Claude, Gemini or Copilot, Slimaco passes on only the fragments that person is permitted to see, with personal data masked. From there, your company’s agreement with that tool’s vendor applies, including its data processing and location terms. The organization’s admin decides whether and which AI tools may connect to Slimaco. We recommend connecting company accounts, not private ones.

Enterprise

For organizations with higher security and compliance requirements.

SSO / your own identity provider Dedicated tenant Your own AI models (BYO AI) Private infrastructure SLA and account manager Audit trail
Let’s talk

FAQ

Data questions

Details in the knowledge base.

Does our data go to the model provider?
Yes, to the extent needed for the answer: the question (with personal data masked) and the relevant knowledge fragments. By default, the platform picks a model from those running in Microsoft Azure in the EU data zone, including selected DeepSeek and Mistral models. Some selectable models, including Claude, process data globally. Providers don’t use this data to train models. Documents, vectors and the knowledge base are stored in the EU.
What reaches ChatGPT or Copilot when they connect to Slimaco?
Only the knowledge fragments needed for the answer that the person asking is permitted to see, with personal data masked. Further processing is the responsibility of the tool’s vendor, under its agreement with your company. The organization’s admin decides which AI tools may connect. The MCP connection will be available soon.
Who sees which knowledge?
You set access at the level of roles and individual documents. The same rules apply to employees and assistants, so Slimaco’s answer is based only on knowledge the person asking has access to.
Can an agent send something without our consent?
Not without your decision. You set approval in two ways: on every agent run, or on the first run, approving the action for a set period. Agents work only in the apps you connect, and their actions are logged.
Do you sign a data processing agreement (DPA)?
Yes. For business Customers, the data processing agreement is part of the contract. You can get the template before signing: legal@slimaco.com.

Start for free

Try Slimaco on your own emails, documents and processes

In a week you’ll know whether Slimaco works in your company. You connect mailboxes and documents, describe your first task and check the result on your own data.

  • No card and no commitment
  • An account with unlimited users for 7 days, with a pool of 5,000 AI credits
  • Activation within one business day
  • Help with the initial setup

Request a trial account

The controller of the data from this form is STGR Sp. z o.o., ul. Marynarska 3, 60-480 Poznań, Poland. We process it to respond to your request and set up a trial account or demo (Art. 6(1)(b) and (f) GDPR). We use the Web3Forms service to send the form. Details and your rights are described in the privacy policy.