Your matter is not our training data

Sequester AG, Baarerstrasse 10, 6300 Zug, Switzerland (CHE-358.088.054) is the controller for Vattel. This policy covers vattel.ai, its research interface and related support.

Questions about privacy or requests to exercise a data-protection right may be sent to [email protected].

Research content. Questions, matter facts you enter and the answer and source packet generated for the request.

Access and contact data. If access control or support is used, this may include your name, work email, organisation, identity-provider identifiers and communications with us.

Technical and security data. IP address, request time, browser or user-agent information, requested path, response status, security events and diagnostic data needed to deliver and protect the service. The Vattel research API is designed not to write question text or request bodies to its application logs.

Official-source data. The service maintains local indexes of publicly available legislation and court decisions. Those sources may themselves contain names or other personal data published by the competent authority.

We process data to answer research requests, retrieve and verify legal authorities, provide and secure access, prevent abuse, diagnose failures, respond to support, comply with law and establish or defend legal claims.

Under Swiss law, processing is carried out in accordance with the Federal Act on Data Protection. Where the GDPR applies, the legal bases are performance of a contract, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where expressly requested.

The production service searches a local official-source index. In evidence-only mode, questions are not sent to an AI model. When full synthesis is enabled, questions and retrieved source passages are processed through a Sequester-controlled inference gateway configured for the deployment.

We do not use private matter content to train public foundation models. We do not enable provider-side conversation history, file stores or vector stores for the default private architecture. A customer-specific order form or data-processing agreement may identify additional infrastructure approved for that deployment.

Research content is held only for the time needed to complete and return the request unless your organisation expressly enables saved matters or another retention feature. The current public research interface does not provide saved matters.

Technical and security records are kept only for the period reasonably needed for security, reliability and incident investigation, or for a longer period where required by law. Support and contractual records are kept while relevant to the relationship and applicable legal retention periods. Backups, if used, expire on their normal protected rotation.

The production origin and local legal index are operated on Sequester-controlled infrastructure in Switzerland. Cloudflare provides authoritative DNS and may provide network-security or proxy services if enabled. Approved infrastructure, identity, support and professional advisers may process only the data needed for their role. We disclose data to authorities when legally required.

A separate development preview may be hosted by OpenAI and is not the production origin for vattel.ai. If Cloudflare proxying or another non-Swiss provider is enabled, transient network data may be processed abroad. Where a disclosure abroad requires safeguards, we use recognised adequacy mechanisms, contractual safeguards and appropriate technical measures.

Vattel does not use advertising cookies or behavioural analytics. An identity or hosting provider may set strictly necessary cookies to authenticate a private session, prevent abuse or deliver the service.

Opening a cited official source takes you to the authority’s website. That site receives the normal technical data sent by your browser and applies its own privacy information.

Subject to applicable law, you may request information about processing, access, correction or deletion of personal data, restriction or objection, data portability, or withdrawal of consent. We may verify your identity and may preserve data where a legal duty or overriding lawful interest requires it.

You may also contact the Swiss Federal Data Protection and Information Commissioner, or another competent supervisory authority where applicable.

We use access controls, encryption in transit, restricted service boundaries and operational safeguards designed to protect personal data. No system can eliminate every risk.

Lawyers and other professionals remain responsible for confirming that use of the service is permitted by their confidentiality, professional-secrecy, client and organisational obligations. Do not enter confidential matter facts unless your organisation has approved this deployment.

We may update this policy when the service or law changes. The effective date above identifies the current version. Material changes will be communicated where required.