01 · This is not speculation
Three public facts about cloud AI.
Each one is documented, and none of them is a scandal. They describe how consumer AI services work.
Providers can see what flows through them.
On 10 September 2026, Anthropic published its fourth threat-intelligence report: eight months of platform misuse it identified, reviewed and disrupted. This monitoring is legitimate and necessary. It also means everything entering a consumer AI service sits inside the provider's compliance perimeter, not yours.
Source: Anthropic, September 2026Retention is not yours to control.
In 2025, a US federal court ordered OpenAI to preserve user conversations, including chats users had deleted, as evidence in litigation. The order was later lifted. What a provider keeps, and for how long, is decided by the provider and the courts it answers to.
Source: OpenAI, June 2025The leak is usually an employee, not an attacker.
In 2023, Samsung restricted staff use of generative AI after engineers pasted confidential source code into ChatGPT. No breach was needed: a convenient tool and a deadline were enough.
Source: Bloomberg, May 2023None of these are scandals. They are the architecture of cloud AI: if a provider can write a threat-intelligence report, it can read what flows through it.
External asset managers · Law firms · Trustees and fiduciaries · Family offices
Professionals whose correspondence carries legal weight, and whose duty of confidentiality does not pause when the tool is convenient.
05 · Diligence
The questions your due diligence will ask.
Where is my data processed?
Messaging data is stored in Switzerland (Infomaniak). Private AI processing runs in Letro-operated environments on dedicated European infrastructure, scoped to your organisation. Nothing is processed by a model provider.
Can Letro read the content of my messages?
No. Message content and attachments are end-to-end encrypted (Matrix Olm/Megolm); the server stores ciphertext.
Then what does Private AI see?
What you choose to share with it, and nothing else. Your prompt travels encrypted from your device to the AI environment assigned to your organisation, and is decrypted only inside that isolated environment, at the moment of processing. It is not retained for training, and no model provider can reach the environment.
Is my data used for training?
No. Never, on any tier.
Which companies are involved in running Private AI?
The models are Mistral's, deployed and operated by Letro. Mistral itself has no access to your data. During preview we don't publish infrastructure partner names, because the setup is still evolving; we walk through the full architecture in demos.
What does early access cost?
Private AI preview is included for early-access participants. Standard founding terms apply platform-wide: first 3 months free on every tier, and a 30-day free trial. Apply as a founding firm →
06 · Early access
Get early access to Private AI.
Tell us where you'd run it. We onboard in small groups, by tier.
Prefer to see it first?
Book a demo →