How your data is protected
Project information is commercially sensitive and often contractually confidential. These are the commitments that govern how Stoa handles yours.
How your data is held
- EU residency
- Storage, processing, and embeddings all stay in EU regions. Your project data never leaves the jurisdiction it came from.
- Never used to train models
- Your project data is not used to train Stoa or anyone else's models. Ever.
- Deletion on your timeline
- Off-board whenever. All data and derived embeddings are removed within 30 days of request.
How answers are made
- Source permissions respected
- Stoa honors the access controls from M-Files, OneDrive, SharePoint, and the rest. People see only what they already had rights to.
- Grounded in your project, not the open web
- Every answer is generated only from your project's own information, never from general web knowledge, which is what keeps citations exact and hallucinations rare.
- Built for the EU AI Act
- Every AI-generated answer is disclosed as such and traced back to its source, so the Act's transparency requirements are built into the product, not added on top.
Questions about how we handle your data?
We'll walk through our security and compliance posture in detail.
Ask about pricing and we'll walk you through the product.