Security and data
Security and data handling at Consilena
Consilena’s servers, databases, files and backups run on Amazon Web Services in Frankfurt, Germany. Connections are encrypted in transit and stored files and the database are encrypted at rest. Questions go to US-based AI model providers with data collection denied. We do not sell personal data or train on your documents.
Where your data is stored
The application servers, the database, uploaded files and their backups are hosted by Amazon Web Services in its Frankfurt region (eu-central-1). Cloudflare delivers the site and protects it against attacks.
Hosting in Frankfurt does not mean every byte stays in the EU. To answer a question, the relevant text of your question and documents is sent to AI model providers based in the US. Some other processors, listed in the privacy policy, are also US companies.
Encryption
- Connections to Consilena are encrypted in transit.
- Uploaded files are stored encrypted at rest with keys managed in AWS Key Management Service, and the database volume is encrypted.
- Consilena reads your documents to work on them, so they are not end-to-end encrypted.
AI processing
Questions go only to the AI model providers that answer them, including models from the Claude, GPT and Gemini families. Requests are routed with data collection denied, so endpoints that store or train on prompts are not used. These providers are based in the US.
We do not sell personal data and we do not train models on your documents or questions.
Access and accounts
- Access to production systems is restricted to the people who need it.
- Sign-ins can be protected with two-factor authentication.
- Security events are logged.
- A sign-in session lasts up to 30 days unless you sign out.
Lawyer handover
If you ask for a lawyer, names, email addresses, phone numbers, IBANs and addresses are redacted automatically from the summary before any handover. The firm receives only the summary you approve, and only once you consent and the firm accepts.
Retention and deletion
| Data | How long it is kept |
|---|---|
| Account and content | While your account is open. You can delete matters, documents and conversations at any time. When you close your account, your content is deleted, except copies in backups, which are overwritten on their normal cycle. |
| Billing records | Six years after the end of the financial year they relate to, as UK tax law requires. |
| Security and service logs | For a limited period needed to investigate incidents, then deleted. |
| Handover consent records | For as long as the handover could be questioned. |
Certifications
Consilena does not claim any security certification today, such as ISO 27001 or SOC 2. If your procurement process needs specific answers, write to [email protected].
CONSILENA LIMITED is the controller of personal data under the UK GDPR and the EU GDPR. The privacy policy lists every processor, transfers and your rights.
Frequently asked questions
Where is my data stored?
Servers, databases, files and backups are hosted on AWS in Frankfurt, Germany. Questions are sent to US-based AI model providers to be answered.
Do you train AI models on my documents?
No. We do not train models on your documents or questions, and requests are routed with data collection denied.
Are my documents encrypted?
Yes, in transit and at rest. They are not end-to-end encrypted, because Consilena reads them to do the work you ask for.
Does Consilena have ISO 27001 or SOC 2?
No security certification is claimed today.
Can I delete my data?
Yes. You can delete matters, documents and conversations at any time; closing your account deletes your content, and backup copies are overwritten on their normal cycle.
Consilena is a software provider, not a law firm. AI output is not legal advice — consult a licensed lawyer in the relevant jurisdiction.
Ask your first question. See the price before you do.
Free start credits · No card · No subscription · AI output is not legal advice — consult a licensed lawyer in the relevant jurisdiction.