--- title: "Security: company AI, GDPR and data in Europe | ekory" description: "Permissions on every document, folder and Eko, checked on every question. Your data is stored in Europe and your content never trains the AI." url: https://ekory.ai/security language: en italian: https://ekory.ai/it/security.md updated: 2026-10-10 --- # Everyone sees only what they're allowed to see. Permissions on every document, folder and Eko, checked on every question. And your data is stored in Europe. _Example: sharing the “Europe price list 2026” folder with groups and Ekos, each with its own level of access. The European dealers group is added as a viewer: it can read, not edit._ ## You set the rules, once. Then they apply to people, to Ekos and to every answer. ### Three roles Admin, Manager and User. Admins manage people, access and connections; Managers and Users work on what's shared with them. ### Groups by department Create groups once, by department or project, and share folders and Ekos with the whole group. ### Permissions per document On every file and folder you decide who can view and who can edit. ## The Super Eko sees what you see. Three colleagues ask the Super Eko the same question. Pick who's asking: the answer changes with the documents that person can open. Who's asking **Silvia** Admin **Andrea** Manager, sales **Davide** User, production A role decides what someone can manage; what they can read depends on what's shared with them or their group. The Super Eko reads only that. _Example: three people at Sironi Arredamenti ask the Super Eko the same question, “How much have we billed Bianchi this year, and at what margin?”. Next to the chat, the Knowledge Base folders each of them can open. Silvia, an Admin, can open all five folders. The Super Eko answers: from January to September you billed Bianchi €486,200, 12% more than in 2025, at a margin of 27%. It cites the sales report and Finance's customer margins. Andrea, a Manager in sales, can open three of the five folders, not Finance. The Super Eko answers: from January to September you billed Bianchi €486,200, 12% more than in 2025. The margin is in Finance's documents, which I can't read for you. Davide, a User in production, can open two of the five folders: Production and Technical manuals. The Super Eko answers: that's not in the documents I can read for you. For sales figures, ask Andrea._ ## A document outside the perimeter never makes it into an answer. The check happens before the search, not after. - An Eko reads only the documents you gave it. - The Super Eko works with the permissions of the person using it, not one more. - If a document is outside the perimeter, it never enters the search: it can't end up in an answer, however the question is phrased. Outside the perimeter: what happens: 1st request An operator asks for a colleague's salary. Not among its documents 2nd request They try again, rephrasing the question. Same answer There is no answer filter to get around: the Eko has simply never read that document. ## Only the people you choose can correct an Eko. They're called Trusted Users: they correct the Eko in chat, and the correction applies right away for everyone who uses it. Everyone else can ask, not teach. So wrong information never enters your knowledge just because someone typed it into a chat. _Example: a Trusted User, the sales manager for Italy, corrects a dealer's discount in the chat. The correction is live right away for the 137 people who use the Eko, and the next day an area manager gets the right figure._ ## Where it lives and what we do with it. ### Stored in Europe Your data is stored in Europe: documents and conversations are kept in Google data centers in Belgium and the Netherlands. ### No training Your content is never used to train AI models: it's written into our contracts with the providers, including Google. ### Secure sign-in People sign in with their company Microsoft account (Microsoft Entra ID, formerly Azure Active Directory), with their Google account, or with a link sent by email. ### Private conversations Each person's chats stay their own. The knowledge is shared, the conversations aren't. ### Read-only at the source ekory reads files from Google Drive, SharePoint, OneDrive and Notion, and never changes them at the source. ### Recorded activity What an Eko does in your tools stays on record, in the conversation or in the automation's history. ## Your DPO's questions. ### Where is our data? Your data is stored in Europe, in Google data centers in Belgium and the Netherlands. When a provider is based outside the EU, the GDPR safeguards and the agreements approved by the European Commission apply. ### Does the AI learn from our documents? No. Your content is never used to train the models: our contracts with the AI providers rule it out. ### Can a colleague read my chats? No. Conversations are private. What's shared is the knowledge, meaning the documents your company has given you access to. ### Can an Eko see more documents than I can? Yes, if you give them to it: an Eko can read documents a person can't open, such as a confidential technical manual, and answer using their content. That's why an Eko's documents are chosen by people who have access to them. The Super Eko, on the other hand, works exactly with your permissions. ### How do people sign in? With their company Microsoft account (Microsoft Entra ID, formerly Azure Active Directory, including accounts synced from your office Active Directory), with their Google account, or with a link sent by email. There are no new passwords to remember. ### Do you have a data processing agreement? Yes. You'll find it on our [DPA](https://ekory.ai/dpa) page, with the list of providers that process data. We'll send you a copy ready to sign on request, so your DPO can read it first. ## Send it to your IT team. This page answers the questions IT and your DPO usually ask. Send it to whoever needs to sign off, or print it. To print it: Ctrl+P, or ⌘P on a Mac. ## Bring your IT team's questions. We'll answer them in a demo, on your own documents. Data processing agreement and provider list available before you sign.