Schwerpunkt: Lokale KI und Pseudomizer. Zusammen. Mehr
Branchenpartner gesucht. Partner werden
Ihre Branche: Rechtsanwalt oder NotarSteuerberaterArzt, Zahnarzt oder PraxisBiogas und EnergieIndustrie und MaschinenbauSchule und BildungLandwirtschaftHandwerkBüro, Verwaltung, Kommune
Service
An assistant that reads incoming post also reads what someone has written into it to control it — in an attachment, in white text, in the metadata. The system does not reliably distinguish between your question and what is in the document.
What it is about
Incoming documents can contain text that is not addressed to you but to your system. ⛔ This is not a legal category but a property of this class of system — and the reason why an assistant may read but must never send on its own.
Connections to mailboxes, file stores and databases are almost always set up with write access because it is easier. Whatever can write can also delete — and nobody plans for that in advance.
If you suspect a data leak, every hour counts: the report to the supervisory authority is due within 72 hours. Anyone who only starts looking for the route then loses the first day.
How it works
Which tool reaches which file store, with what rights. It usually turns out: more than expected.
Read-only instead of write access wherever possible. Separate data stores where things must not come together.
Third-party text is kept separate from the task. And the hard rule: no tool with its own sending route.
Who asked what, what came back. Plus a reporting route that is written down before the emergency and not devised in the middle of it.
What is there afterwards
And what it does not
Anyone who promises everything is switched off at the first objection. That is why we say beforehand where the limit lies.
Security is not a state you can buy. We reduce attack surfaces and make incidents noticeable — we cannot rule them out, and anyone who promises that is not telling the truth.
Firewall, backups and rights management remain what they are. We take care of what is newly added by AI tools.
We set up and hand over. Ongoing monitoring would be something different and would have to be agreed separately.
A look inside
A two-minute flight through the operational view of our airlock. Every body is a programme, every line a route along which data travels. You see where secrets are replaced, what stays local and what the cloud never receives.
Status: version 0.1 alpha, so far tested only with fictitious examples. The view is a snapshot from 05.10.2026, names are neutralised. Not legal advice. Load file
Frequently asked questions
A sentence in an incoming document that is addressed not to the reader but to the system — for instance an instruction to ignore earlier instructions or to forward content. It can be invisible: white text, metadata, footnote.
No. The text is often not visible to people. ⛔ Attention helps against obvious cases, not against those written for machines.
Mostly not. Most of it is setup: rights, separation, logging, reporting route. That costs care, not licences.
Some tools can read the screen. During a meeting in progress or with a second system open, that is a problem. The function should be switchable off and blocked for confidential windows.
Since 11 September 2026, manufacturers must report actively exploited vulnerabilities to the authorities within 24 hours and inform their users. ⭐ Have the contract guarantee that you will be informed — not only from the press.
One conversation, one real task from your daily work. We use it to show what AI and automation can do for you.