Security

Last updated: August 31, 2026

Salalem runs on enterprise cloud infrastructure and handles personal data under GDPR and PDPL. What follows is what we can state plainly today; where a question needs a document rather than a paragraph, ask and we will send it.

Where Salalem runs

Salalem runs on Microsoft Azure. Your institution's environment is provisioned there rather than on hardware we maintain ourselves, which is what lets the platform inherit Azure's physical, network, and availability controls.

Where your data is stored

The region your data is stored in is set when your environment is provisioned, and we confirm it in writing before contracting. If your regulator or your own policy requires a specific country, tell us during the evaluation — it is a deployment decision, not an exception.

Privacy and personal data

We process personal data in line with GDPR and PDPL: data is used to run the service you contracted, subject-rights requests are handled through your administrator, and we do not sell data or use your employees' learning records to train models for anyone else.

Who can reach it

Access follows your own identity provider — Microsoft Active Directory or Entra ID, Google Workspace, or a provider you configure — so joiners and leavers are governed by the directory you already audit rather than by a second list inside Salalem.

How the AI assistant handles your content

The assistant runs on Salalem's own Azure OpenAI deployment in Sweden, reachable over a private endpoint rather than the public internet. Your documents are indexed in a store of their own, and every search filters on the institution that owns it, so one organization's content cannot surface in another's answers. One outside service takes part: Cohere re-orders search results by relevance at the moment a question is asked. Nothing is trained on your content — every model call is made while the question is being answered.