← Back to homePrivacy & controls
Privacy & controls

A clear path from
question to source.

InkToBrain’s own retrieval layer builds on established search methods to select relevant document context and connect answers to sources you can review.

Industry & regional requirements
Document retrieval pipelineInteractive architecture / 7 stages
The document retrieval stack, shown in seven isometric layersFrom top to bottom: PDF documents, data intake, SQL database, search index, retrieval, AI output, and human verification against the original sources. Select a stage beside the diagram to explore it.INOUTREVIEW / VERIFY07ANSWER / SOURCES06RETRIEVE / RANK05FTS / VECTORS04SQL / LIBRARY03EXTRACT / CHUNK02PDF / SOURCE01

A conceptual view of the retrieval pipeline

Choose a stage to see its role.

01 / Source files

Start with your documents.

PDFs and other supported files enter your library. The original source files are kept separately from the searchable database.

Inside InkToBrain’s retrieval layer

Keyword search finds matching passages. When enabled, semantic search also looks for related meaning. InkToBrain brings those results together, expands searches when initial results are sparse, and provides source references alongside document answers.

These steps support relevance and traceability. They do not independently verify every fact. Review the cited material before relying on an answer for an important decision.

For document questions, relevant passages are shared with the configured AI provider. Full-document reads and other workflows may share more context.

  • Data privacy

    Discuss storage, retention and AI-provider data flows with our team as part of your setup.

  • Access controls

    Set document access and project membership so people work with the knowledge intended for them.

  • Human oversight

    Review email drafts before sending and approve proposed project-agent actions.

Industry & region

Data protection shaped around your business.

Healthcare, finance and other industries have different requirements for their data. We work with each client to identify the requirements for their industry and region, then take care of the agreed technical setup for data access, handling and retention.

Europe
Examples include EU GDPR, UK GDPR and country-specific rules for personal data and international transfers.
North America
Examples include HIPAA for covered U.S. healthcare organizations and their business associates, state privacy laws such as California’s CCPA, and Canada’s PIPEDA and provincial laws.
Assurance & payments
SOC 3 covers independent assurance reporting on service-organization controls. SEPA covers euro payment rules where payment workflows are in scope. These are considered separately from privacy law.