MAISON SASSON LTD
Security & Data Sovereignty
Last updated: 30 October 2026 · Controller: Maison Sasson Ltd, Company No. 13345607, 82a James Carter Road, Mildenhall, Suffolk, England, IP28 7DE · Contact: legal@ai-eu-act.xyz
1. Architecture
Database hosted in the European Union (Frankfurt). Row-level security isolates every organisation's data at the database layer; every policy requires two-factor (AAL2) sessions. Plan limits, budget controls and seal quotas are enforced server-side in database functions, not in the browser.
2. Encryption
TLS 1.3 in transit; encryption at rest. Vault files are encrypted client-side with AES-256-GCM using keys derived from your passphrase (PBKDF2-SHA-256, 600,000 iterations); servers store ciphertext only and expired ciphertext is purged hourly.
3. Audit integrity
Case events form a SHA-256 hash chain written by database triggers; update and deletion are blocked at the database level. The public /verify endpoint confirms only integrity status and timestamp, without exposing names or sensitive data.
4. AI processing
AI-assisted analysis runs through enterprise APIs configured not to train on your data, with pre-processing PII redaction for text inputs. Enabling sovereign mode restricts the contract parser to deterministic rules only. Scanned-PDF OCR sends page images to the AI model; redaction is applied to the extracted text afterwards.
5. Honest limitations
Global content delivery and some third-party processing may operate outside the EU; strict EU-only processing is not guaranteed unless separately agreed. PDF/A-style metadata is not formal PDF/A certification. Report vulnerabilities to legal@ai-eu-act.xyz.