# Your data stays yours

> GDPR, encryption, and security for your legal data. Praktik.ai meets Slovak Bar Association requirements for external AI tools and stores data only in the EU.

**Canonical URL:** /en/security/

Praktik accesses your data only with your explicit consent. Every file is encrypted, no data is used to train AI models, and all data stays within the EU.

- Compliant with SAK guidance
- GDPR compliant
- No training on your data
- Data stays in the EU

## Praktik complies with Slovak Bar Association guidance

The Slovak Bar Association issued guidance defining safe use of AI tools in legal practice. Praktik meets these requirements in full.

- [Read the SAK resolution](https://info.sak.sk/wp-content/uploads/2025/12/Uznesenie_12-4-2025_plne-znenie-k-25-11-2025.pdf)

## Security integrated into every layer

### Encrypted in transit

All communication with Praktik.ai is encrypted using TLS.

### Encrypted at rest

Sensitive data is stored and encrypted using AES-256 or an equivalent encryption algorithm.

### EU

All sensitive data is processed and stored within the European Union.

### 2FA

Sign-in is protected with two-factor authentication.

### Private data

Your data is accessible only to you and other members of your organization.

### No AI training

Your data is never used to train or improve AI models.

### Least privilege

We follow the principle of least privilege to minimize the risk of unauthorized access and data leaks.

## Certifications in progress

We are in the process of preparing and obtaining ISO 27001 and GDPR certification. The certification also includes penetration testing, through which we have our infrastructure security independently verified.

## Frequently asked questions

### Where is my data stored?

Data is stored exclusively on servers within the European Union.

### Does Praktik use my data to train AI?

No. Your documents, prompts, and outputs are not used to train AI models.

### Who has access to my files?

Only users you grant access to, and Praktik accesses data only with your explicit consent.

### What happens to my data when we stop working together?

Data can be exported or deleted according to agreed retention rules and contract terms.