Security
Protect sensitive data before it reaches AI.
Your originals and mapping tables stay in your environment. Only the pseudonymised version is sent.
Architecture
An architecture designed to limit data exposure.
Receives only the pseudonymised version and the content the request needs.
Publisher of NYMETRA
Choosing an AI tool
Four questions to ask before adopting a tool.
| Question | Why it matters | NYMETRA’s answerSoftware installed on the computer |
|---|---|---|
| Where is data processed? | Every third-party server is one more provider handling your data. | On the user’s computer |
| Who keeps the mapping table? | With it, anyone can recover each person’s identity. | You, in a local encrypted vault |
| Does a human approve every request? | It is the last safety net before data leaves. | Yes, before every request to AI |
| Which AI can you use? | The company must stay in control of its tools and contracts. | Yours, your choice |
CNIL, “How to deploy generative AI?”, 18 July 2024 · GDPR (EU) 2016/679, arts. 25 and 32.
Local protection
What could identify your clients stays with you.
- Originals and mapping tables kept locally
- Encrypted local storage
- Credentials, secrets and API keys protected in the intended environment
- Secure communication with third-party services
The framework
The framework already exists. It applies to every request.
Fines of up to €20 million or 4% of worldwide annual turnover.
“Do not provide personal data to the system”; favour “local, secure and specialised systems”.
Disclosing secret information: 1 year in prison and a €15,000 fine.
Ready to choose?
Ready to use AI on your sensitive documents?
Full transparency
The questions we get asked.
Are my original documents sent to SYTEWEB?
No, in normal operation.
What do GPT, Claude or Gemini receive?
The pseudonymised version and what the request needs. The mapping table is not sent.
Does pseudonymisation make my data anonymous?
No. Pseudonymisation keeps a local link to the originals; anonymisation prevents any re-identification.
Can detection miss sensitive information?
Yes, it can. That is why you review and approve before every request.
Can two files sent from the same computer be linked?
Yes. The same information gets the same code on a computer: a provider could link two requests from that computer without knowing the original data.
Is NYMETRA “100% local”?
Not strictly. The pseudonymised request goes directly to the AI provider, and SYTEWEB may process technical metadata (activation, licence, updates).