Skip to content
Platform · Security & LGPD

Security you verify — not take on faith.

Row-level isolation on every table, PII encrypted at rest and data that never leaves Brazil. On the right, the control that matters most in the form it actually exists: a test.

isolation pen-test · CI
$ security --suite tenant-isolation
SELECT dre WHERE org = 'org_b' · session org_a
0 rows · blocked by RLS
vector search outside the organization
0 documents · isolation held
direct read of the cpf column
AES-256-GCM ciphertext · no key in the application

# illustrative output — the real suite runs on every code change
# last suite run: 7/28/26

Isolated per row.Row-Level Security on every table, per organization: one group’s query never reaches another’s data — not even through an application bug.

Encrypted at rest.CPF and date of birth in AES-256-GCM, with KEK/DEK envelope and secrets derived with Argon2id. Decrypted server-side only.

In Brazil.Production and backups in sa-east-1 (São Paulo). Nothing leaves the country — and telemetry never receives personal data.

Personal data

One CPF, four observers.

The same value exists in a different form for every system that touches it. Pick the observer.

clientes.cpfencrypted at rest
a94f 1c07 8be2 … e2c1

Encrypted with AES-256-GCM and a KEK/DEK envelope: whoever copies the disk gets noise, not data.

Audit

Everything leaves a trace. No one erases it.

append-only trail

Every action — human, agent or AI — recorded with identity, object and instant. Immutable by design.

RoPA · 5-year retention

The record of processing activities LGPD requires, retained for 5 years and ready for your legal team.

access is an event

Reading personal data is recorded too: who decrypted, when, and for which action.

AI with safeguards

Defense in depth — not a silver bullet.

From a document upload to the specialist’s answer, six independent controls. None promises 100%; each covers the failure of the previous one.

[ 01 ]

Only text survives

Every file becomes canonical text before indexing: macros, scripts and active content are discarded in conversion.

[ 02 ]

Formal sanitization

Character normalization, size limits and rejection of command-injection patterns on input.

[ 03 ]

A document is data, never an instruction

Content enters the prompt as structured data, separate from system instructions — it cannot give the model orders.

[ 04 ]

PII redacted before the model

The model analyzes business numbers and text — never the personal data behind them.

[ 05 ]

Numbers checked on the way out

Deterministic validation: every cited value is checked against the books before it reaches you.

[ 06 ]

Reviewer + circuit breaker

An AI reviewer evaluates each answer; anomalous patterns halt the session and become a security event retained for 5 years.

Cross-organization isolation is tested adversarially on every code change — the suite at the top of this page.

LGPD

Built for your legal team to say yes.

Data subject rights

Access, correction and deletion (DSAR) handled through a formal process, with deadlines and an audit trail.

Recording consent

A meeting is only recorded after each participant’s registered consent — without it there is no audio and no export.

Subprocessors

AWS infrastructure (São Paulo), Anthropic models, Deepgram transcription. Full list available during technical evaluation.

Published DPO

Direct channel for data subjects and for the ANPD:

Anderson Souza dos Santos
dpo@autocontroller.ai

And at the source, nothing changes.

What reads your ERP or DMS is an agent running on your server, read-only: encrypted credentials, zero writes, checkpoint after failure.

See Ingestion and Agent

Frequently asked questions.

Bring this page to your technical due diligence.

Get a demo