Proposed controls: core data processed locally, only approved and pseudonymised text sent out

Every request is classified, routed by policy and logged. Text bound for a cloud model has names, companies, amounts and identifiers replaced by stable placeholders; the lookup table stays in the group environment, and the answer is restored on the way back. Hosting, data flows, retention and model-provider terms are confirmed with the group’s IT, security and legal teams before implementation.

PUBLICPublished RFP, laws, public award results→ Cloud after pseudonymisation

INTERNALCompliance matrix, plans, technical drafts, CVs→ Cloud only pseudonymised, else local

CONFIDENTIALCost sheet, prices, margins, supplier quotes, risk factor→ Proposed: local model only

RESTRICTEDPersonal data (Iqama, payroll), bank details, bonds→ Proposed: local model only

Try it

Task: Summarise the obligations and flag clauses beyond standard positions.

Declared level Cloud allowed Local model up

What happened

Run a sample to see the routing decision, what leaves the environment and the restored answer.