Torus IT Security
Menu

Frequently asked questions

The questions we get before signing.

Short, verifiable answers. If yours is missing, write to us: we will add it here.

What exactly is the Torus platform?

An application installed on an instance reserved for your organisation. You put your documents in it; it answers your questions from those documents, citing its sources, and prepares drafts.

The cyber pack, optional, adds specialised agents and the risk analysis module.

Where are my documents?

In your instance, operated by Torus at OVHcloud, in France. Text extraction and the search index stay there too.

To answer a question, only the question and the retrieved excerpts reach the AI model. Your files themselves never leave the instance.

Which AI model do you use?

Models from Mistral, a French provider, under a Zero Data Retention contract: the provider does not keep the data sent to it.

The model used is set by Torus at deployment, per task. Neither a user nor an instruction hidden in a document can change it.

Are my documents used to train a model?

No. Neither your documents, nor your conversations, nor your analyses.

What does it cost?

The subscription covers your instance; the cyber pack is added if you take it. What moves the amount: the number of users, the volume of documents and whether the pack is included.

Pricing is established on a quotation basis.

What does it take to get started?

Documents to work on, someone who decides on access, and your management's agreement to entrust those documents to a provider.

Does Torus make me NIS2 compliant?

No. No software does. Torus prepares the risk analysis, records it and pre-fills the four templates published by the ILR.

You review those templates, you complete them if needed, and you are the one who submits them. Torus transmits nothing to the ILR.

Does Torus replace a consultant?

No. It removes the preparation work — finding, cross-checking, formatting — and leaves the decisions to your team or your advisor.

Every proposal from the AI is reviewed by a human before it becomes a decision.

If I stop, do I get my data back?

Conversations export as Markdown or JSON, risk analyses as PDF and Excel, and the documents you imported remain yours.

In which languages?

The interface exists in French, English and German. Risk analysis reports come out in French, English or German.

The ILR templates keep the languages of their official versions.

Who sees what?

Access is granted knowledge base by knowledge base. A user only sees documents from the bases opened to them — including in the sources cited under an answer.

Administration actions are written to an audit log.

Are you ISO 27001 certified?

No, and we will not let anyone believe otherwise.

A question that isn't here?

Ask it: we answer ourselves, with no qualification form.