For SMEs that already work with ChatGPT, Claude or Mistral Vibe
Right now your team pastes contracts, personnel files and client reports into a chat window. PrivaSearch detects personal data, replaces it with pseudonyms and has a person check the processing before anything becomes searchable. The originals sit in a shielded environment with its own database and its own address per organisation, with EU hosting as the starting point.
PrivaSearch is software that lets your team search its own client files with Claude, ChatGPT or Mistral Vibe, after names, BSNs (Dutch citizen service numbers) and addresses have been replaced by pseudonyms and a colleague has checked that.
Works with uploads and with your existing SharePoint libraries, read-only. You connect Claude, ChatGPT Business or Mistral Vibe through a secure MCP connection. One price for your whole firm, not per user.
Conversation with Jan de Vries [PERSOON_B4A1] of De Vries Installatie BV [ORGANISATIE_E349], born on 3 March 1980 [GEBOORTEDATUM_788C]. BSN 123456782 [BSN_361B]. The term of the agreement is twelve months with a notice period of two months.Only the right-hand side goes to the search layer. Every project member can open the original; revealing a single pseudonym requires write access. Both are logged.
Aligned with
Hosting
What goes wrong now
Nobody does it on purpose. But every time a colleague "quickly" uploads a client file to get a summary, personal data leaves your organisation — often without a data processing agreement, without a record of processing activities and without a trail.
Names, BSNs (Dutch citizen service numbers), salaries, medical details and addresses end up with an American provider. Without a data processing agreement and a record of processing activities, that is a risk under the GDPR, with a possible duty to notify if it goes wrong. A European provider changes that only in part: ‘in the EU’ says where your data is stored, not what you may put into it.
With consumer versions of AI chatbots, input may be kept and used to train models, depending on the settings. Business versions sometimes offer more control, but without explicit configuration and a data processing agreement you have no certainty.
The supervisory authority asks: which data, whose, when, on what lawful basis? A chat history on a private account doesn't answer that.
How PrivaSearch works
PrivaSearch sits between your documents and the AI model. Personal data is detected within PrivaSearch itself and replaced by consistent pseudonyms; a person approves before anything becomes searchable.
Your own assistant
PrivaSearch isn't an AI of its own that lags behind the rest. You keep working in the assistant you already know. When a new model comes out, you simply use it, with the same protection around it.
PrivaSearch supplies the passages from your client files. The thinking is done by the model you choose in your assistant.
You don't have to set anything up again or upload anything again. The connection stays in place and your documents stay where they are.
Whichever model you choose, it only gets pseudonymised passages from documents that have passed the privacy review.
GDPR and EU AI Act
Compliance isn't a tick box from a supplier but a chain of measures you can show to a supervisory authority — plus the paperwork that goes with it.
The measures per articleData minimisation, pseudonymisation with a separate vault, an audit log without document content, retention periods with controlled deletion, and processing in the EU.
No automated decisions about people, mandatory human oversight, a source reference with every answer and built-in AI literacy training with periodic refreshers.
Hosted in the EU
PrivaSearch is designed with EU hosting, pseudonymisation and limited data transfers as the starting point. Documents you upload are processed and stored in data centres in the EU; which parties are involved is set out in the overview of sub-processors. PrivaSearch delivers this as a cloud service: we take care of hosting, updates and security, and you don't have to install or manage anything.
What runs whereWho it's for
Make annual accounts, payroll records and tax files searchable without client data ending up in a chatbot.
Query contracts and litigation files with source references, with a duty of confidentiality that stays intact.
Personnel files, intake reports and assessments: special category data deserves an environment built for it.
We show it with fictitious client files from your sector: upload, detection, review, search and the connection with your AI assistant. Afterwards you'll know exactly what your team can use safely.
Book a demo →