Security and data protection
We set out plainly where personal information goes in our products, what is kept and who can see it.
Our principles
These principles apply to every Teonexa product.
Never used for training
Your questions, documents and answers are never used to train any AI model.
Masked
Personal details are masked before they leave our server.
You stay in control
What you save is stored encrypted and deleted whenever you choose. What you do not save is not kept.
Visible
You see what will be sent beforehand and can trace it in the log afterwards.
The list of sub-processors and the legal basis for transfers abroad are set out in each product's own privacy notice; the Teolex notice is shared with you before the pilot begins.
How data moves in Teolex
- You
Question, document or account
Sent from your browser over an encrypted connection.
- Teolex server, Türkiye
Masking and preview
Names, ID numbers, addresses, phone numbers, IBANs, email addresses and number plates are masked and the file name is removed. You see the masked version before it is sent.
- Abroad
Language model
Only the masked text is sent; the model writes the answer and returns it.
- Back to you
Sourced answer
Names masked in a petition are restored on the Teolex server; the language model never sees them. If you add the answer to a case file it is stored encrypted; if not, it is not kept.
What is kept and what is not
- Case file: documents, notes, added answers
- Encrypted, until you delete it
- Questions, documents and answers not added to a case file
- Never written to disk; at most 2 hours in memory
- Transfer log
- No content: time, recipient, purpose
Account security
- Invitation onlyAccounts are opened by invitation only.
- Two-step sign-inWith an authenticator app, plus recovery codes.
- Encrypted connectionEvery request goes over HTTPS.
- Yours aloneOnly you can see your documents and records.
In Teolex the lawyer is the data controller for client documents; Teonexa acts as a data processor on the lawyer's behalf. The details are in the Teolex privacy notice and the data processing agreement.