Where is my data processed when Maditon uses AI?
Everything Maditon sends to AI — what your company typed or uploaded, and the published legal documents of your suppliers — is read by Mistral in France, on an EU endpoint, with training on submitted data switched off. No other AI provider is involved, and nothing leaves the EU-only path.
Two kinds of text pass through Maditon, and both go to the same place.
Your material — everything you typed, uploaded, or described about your own company: system descriptions, notes, questionnaires, your compliance profile. This is read only by Mistral AI in France, through an EU regional endpoint, with model training on submitted data switched off for our account.
A supplier’s published page — a privacy policy or terms sitting on the open web, which anybody can read without signing in. Reading these well is the product, and it happens on the same Mistral model and the same EU endpoint. Because a reading quotes the page word for word, its text is sent as the supplier published it; nothing about your company travels with it.
One reader, deliberately. Before choosing, we compared Mistral Large with the leading US models on our test set of vendor documents: it found as much of what matters and, unlike the others, made no false accusations. So nothing had to leave the EU.
There is no setting that changes where a document is read. If a further reading route is ever opened, this page and the privacy policy change first.
Regulation references
- Regulation (EU) 2016/679 (GDPR) · Chapter V · CELEX 32016R0679
- Regulation (EU) 2024/1689 (EU AI Act) · CELEX 32024R1689
Read next
A free Solo account runs a real classification on one of your own systems — no card, no sales call.
Run a free classification