Company

Security at GAIA

Your contracts, cap table and resolutions are among your most confidential data. Here is how GAIA protects them: hosted in the EU, independently audited, and never used to train AI models.

Built to pass your review.

Certified information security, European data protection and hosting in the EU.

ISO/IEC 27001 certified by Proks Certification

ISO 27001 certified

GDPR-compliant

How we protect your data

Your data stays in Europe

GAIA runs in European data centers. As your data processor, we process personal data only on your documented instructions, under the data processing terms in our Terms of Use (Art. 28 GDPR).

Your documents never train AI models

Contracts, cap tables and resolutions you keep in GAIA are used to do your work, and nothing else. They are not used to train AI models.

Independently audited

GAIA is ISO 27001 certified by Proks Certification: our information security is audited against the international standard.

You decide who sees what

Roles and permissions decide who can view, edit and approve. An audit trail records every step, and data rooms let you share selected documents without sending files around.

People stay in charge

Qualified lawyers design the legal logic and engineers tune the models to it. Nothing leaves GAIA without the sign-off of the person responsible.

Backed up daily, overseen by a DPO

Your data is backed up at least once every calendar day. Our appointed Data Protection Officer, Kertos GmbH, oversees data protection at GAIA.

Trust

Secure, EU-hosted AI for confidential legal work.

  • 1 · Built by lawyers

    Qualified lawyers design every playbook, template and workflow, so the legal logic holds.

  • 2 · Tuned by engineers

    Engineers tune every model and workflow to that logic and keep it fast and reliable.

  • 3 · Hosted in the EU

    Your data stays in European data centers.

  • 4 · ISO 27001 certified

    Our information security is independently audited against the international standard.

  • 5 · GDPR-compliant

    Your data is processed in line with European data protection law.

  • 6 · No training on your data

    Your documents never train AI models.

  • 7 · Roles and permissions

    You decide who sees and approves what.

  • 8 · Human in the loop

    Nothing leaves GAIA without the sign-off of the person responsible.

Security questions, answered