Cuora is built for organizations handling confidential contracts and sensitive legal information, with tenant-level data isolation, encryption in transit and at rest, and strict access governance built into the platform by design.
Cuora is hosted on Amazon Web Services (AWS) cloud infrastructure, leveraging environments designed to meet internationally recognized security and compliance standards.
Infrastructure certifications (AWS)
Upload sensitive documents with confidence. When handling counterparty contracts or regulated data, enable anonymization at upload. Identifiers are stripped on your device before anything is transmitted. Cuora analyses the structure, never the names.
Customer data is processed in accordance with GDPR principles, including defined controller/processor roles, retention controls, and lifecycle-based deletion mechanisms.
Customer documents, prompts, and outputs are never used to train general AI models. This commitment is contractually enforced.
100% EU-based (AWS Frankfurt/Ireland). Fully GDPR compliant.
Cuora protects data using encryption in transit and at rest, tenant-level logical isolation, strict access governance, and continuous monitoring across infrastructure and application layers.
No. Customer data is never used to train general AI models. This commitment is contractually guaranteed.
Cuora maintains documented incident response procedures, including investigation, remediation, and customer notification obligations defined in contractual security commitments.
Yes, and it’s optional. Enable anonymization at upload and all identifiers are stripped on your device before anything is transmitted. Cuora receives and analyses only the anonymised version, the original text never leaves your hands.
No. Under the EU AI Act, Cuora is a ‘Limited Risk’ transparency-focused tool for professional augmentation.