Security and data
Your data stays yours, and it stays in Europe.
It is the first question we get in almost every call, and it has a precise answer. The path is built so that sensitive data enters late and never by accident: first you learn without touching it, then we build on European infrastructure, with the keys in your company’s hands.
The path
Two phases. Sensitive data only enters the second one.
Phase 1 · the training
You learn without sensitive data
The two days run on Claude Team, with no confidential documents uploaded. We work on what the tools can do and on the first use cases: the point is to make the concept land, not to put your information assets into circulation.
- No training on your organisation’s content, by default
- SSO and admin controls over connectors
- Centralised user and billing management
- Organisation-wide search and shared Projects
The practical result: no tools used on the sly by individuals, which is the real risk when a company decides nothing and people improvise.
Phase 2 · the Company Brain
European infrastructure, your keys
When it makes sense to raise the level of data involved, the Company Brain is built on AWS or Azure inside European territory, in your company’s tenant and with your keys.
- Data lives in your tenant, not in our systems
- The keys belong to your company
- Every access is logged
The software stays installed and running on your infrastructure, and the content of the brain is yours: documents, concepts and tables sit in open formats and can be exported. If one day you change supplier, you take it with you.
Governance
This is not a verbal reassurance. There are lawyers behind it.
Partner law firm
Governance and privacy notices are handled by a partner law firm: the same one that drafts the general terms of contract for Martes AI.
Written down first
In the assessment call we define which data will be touched, where it lives and on what legal basis. Before signing, not after.
No lock-in
The platform is model independent. The second brain is a folder of files: if a better provider comes along, the work already done is not thrown away.
Integration
We work with your IT team, not around it.
"The APIs on our management system are unusable, people have tried and failed." We hear it often, and it is almost always true.
We force nothing and we go around nobody. We get in touch with your IT team and decide together which route is actually workable, and it changes from company to company. We do not need write permissions to start.
- Read-only access to the database, when the APIs cannot carry the load
- The API documentation you give us, when it exists and is usable
- A decision shared with your IT team on which of the two routes to take
Legacy management systems
TeamSystem, Zucchetti, PEC and the vertical management systems used across Italian industry are the normal context we work in, not an edge case. If your system is not on that list, the question to ask us in the call is how we handled the ones that resemble it.
Bring your IT team
Thirty minutes with us and with whoever runs your systems: we come out with a map of which data we would touch, where it sits and what is needed to start.
In Martes AI projects, sensitive data enters late and never by accident. Training runs on Claude Team with no confidential documents uploaded, and by default that environment does not train models on your organisation's content. The Company Brain is built on AWS or Cloudflare inside European territory, in the client's tenant and with the client's keys: if the relationship ends, the system keeps running, because it is an asset of the client company. Governance and privacy notices are handled by a partner law firm.