Security, DPA & Zero Data Retention

Use AI securely,
without training on your data.

Lurus supports privacy-conscious AI usage for businesses with Zero Data Retention, No Training, DPA, audit logs, local storage and European operating paths – depending on the specific use case.

Direct answer

Lurus is suitable for teams that want privacy-conscious AI usage: No Training, Zero Data Retention, DPA, audit logs and local storage options are core building blocks. There is no blanket GDPR guarantee – the concrete use case should always be reviewed.

Privacy-conscious security. From the ground up.

GDPR-aware architecture

Lurus is designed for privacy-conscious business use: data minimization, purpose limitation, DPA, roles and technical safeguards are considered together.

No Training & Zero Data Retention

Your inputs are not used to train AI models. For offered standard models, No Training and Zero Data Retention are fixed selection criteria.

Encryption

TLS 1.3 for transmission, AES-256 for stored data and access tokens. All data is encrypted – both in transit and at rest.

Hosting infrastructure

Hosting infrastructure: ISO/IEC 27001 certified and C5 attested. The certification and attestation represent established requirements for information security and controlled operational processes.

Local Storage

For maximum data sovereignty: Store chat histories exclusively on your device.

Privacy by design

With local storage enabled, Lurus does not store any chat data persistently. We only get temporary access to your chat data to process your request and then delete it again.

IndexedDB Storage

Robust browser database unaffected by cache clearing. Large amounts of data directly in the browser – fast, reliable, and without server communication.

Device-Level Encryption

All locally stored data is encrypted with AES-GCM. The key is securely delivered to your device – encryption and decryption happen exclusively on your device.

Export & Portability

Export your data at any time as a structured JSON format. Full portability and control over your data.

Certifications & Compliance

GDPR-compliant with ISO/IEC 27001-certified and C5-attested hosting infrastructure. Built for businesses with high demands on data protection and information security.

GDPR

GDPR Compliant

Compliance with the European General Data Protection Regulation.

ISO C5

Hosting infrastructure

Hosting infrastructure: ISO/IEC 27001 certified and C5 attested.

SOC 2 Type II

SOC 2 Type II

Our infrastructure is aligned with SOC 2 requirements for security, availability, and confidentiality.

CASA

CASA Certification

Cloud Application Security Assessment is an independent review of application security.

Frequently Asked Questions

Ready for secure AI?

Start today with Lurus and protect your business data with strong security standards.

No credit card required