Separated client spaces
Data is organised by space and scope, with clear separation between client contexts, administration and operational work.
Security & data
A trust posture designed for European cyber teams.
Torus treats client documents, exchanges and evidence as sensitive material. The platform favours separation, minimisation, human validation and no default reuse.
Principles
What Torus protects first.
Security is not decorative copy: it shapes how the assistant, e-learning, risk analysis and evidence workflows are designed.
Authorised client documents
Client documents are used by the assistant only when they are added to the relevant client workspace and made available.
Human-controlled evidence
Torus can help review uploaded evidence and flag what appears sufficient, incomplete or inconsistent; validation remains human.
Auditable exports
Reports, workbooks and evidence are designed to be reviewed, shared and retained as working material.
AI & confidentiality
No reuse of client data.
AI exchanges must remain aligned with the expectations of a CISO, cyber consultant or compliance team.
ZDR enabled
ZDR means Zero Data Retention: client data sent to the model during AI exchanges is not retained for training or reuse.
No reuse for training
By default, Torus does not reuse client documents, evidence or conversations to train models or enrich datasets.
Separate agreement for contributions
Any potential contribution to a Torus reference set would need a separate, explicit, minimised, redacted and validated contractual process.
Client context comes first
Documents added to the client workspace remain the primary source; Torus cyber and compliance references support without replacing client context.
Clear boundaries
What Torus does not promise.
Torus states the limits before the demo: AI assists, sources remain reviewable and decisions remain human.
Torus does not promise automatic compliance.
An AI answer does not become evidence by itself.
Client documents are not used outside the purposes validated with the client.
Generated deliverables remain drafts or working material to validate.
Risk, audit and compliance decisions remain under human responsibility.
Discuss your trust requirements.
A useful demo can also cover your data, validation, evidence and scope-separation constraints.