Where your data lives
In the EU – or on your own servers.
Paragraf runs in the EU. For organisations that need it, we deliver Paragraf on your own local servers with a local AI model, so your data never leaves your network.
Security
Control is in the foundation, not added on top.
Everyone sees what their role allows – nothing more. The same rules apply to people, to what you build and to Luis. Change the role and see what happens.
RepositoryViewing as Legal counsel
- Supplier agreement · Nordlog AB
- Employment contract · Head of Sales
- Data processing agreement · CloudOps
- Shareholder agreement
- Board minutes · Q3
Luis I can see 5 records for you. Ask me anything about them.
How it works
The same rules for people, systems and AI.
Security is not a module you add. It is the foundation everything else inherits – including what your teams build themselves.
- Permissions everywhereWorkspaces, Teams and Permission sets. Sign in with SSO and Entra.
- Sensitive data masked on the serverSensitive Properties and personal ID numbers are masked before they leave the server – in the interface, in the API and in exports – unless the role may see them.
- Full logEvery change, approval and decision is recorded, with who did it and when.
- AI within your permissionsLuis only answers from what the person asking may see, shows the source and never saves anything without review.
- In the cloud or in your own environmentRun Paragraf where your organisation needs it.
Everyone sees what their role allows – nothing more.
The same rules for people, for what you build and for Luis.
Trust center
What your IT, Legal and Procurement will ask – answered up front.
Where your data lives, which standards we are certifying against, how Luis treats your information and which documents you get before you decide.
Certifications
The standards we hold ourselves to.
- ISO/IEC 27001Information securityIn progress
- ISO 9001Quality managementIn progress
- ISO 14001Environmental managementIn progress
- NIS2Our own complianceIn progress
How Luis treats your information
The same rules as everyone else.
- Sees only what the person asking may see
- Shows the source for every answer
- Builds drafts – nothing goes live without your approval
- Everything in Paragraf works without him
Before you decide
In writing, not in a meeting.
Our data processing agreement, sub-processor list, security description and AI policy – sent to your IT, Legal and Procurement before you sign anything.
Your own compliance
Built to help you meet the requirements you face.
NIS2, DORA, GDPR and ISO 27001 are part of the product, so you can run your own Controls and Evidence in the same place as your contracts and processes.
NIS2DORAGDPRISO 27001
Next step
Fewer systems.
More control.
Book a walkthrough of your systems and requirements. We show you the thread from requirement to proof – with your own requirements.