Privacy and retention
Location: Privacy.
What the PII filter does
Netter receives original text and detects personal data locally. When protection is enabled, recognized entities are replaced before text reaches the provider. Original values are restored in responses, tools and streams.
Reversible mappings are encrypted and isolated by context and identity. In production, missing required dependencies prevent protected dispatch rather than falling back to original unfiltered text.
Detection can produce false positives and false negatives. Reversible protection and pseudonymization do not guarantee anonymization and are not GDPR certification.
Images, scans and audio
Images and audio are outside the PII filter. A scan does not automatically become anonymized text. Choose a suitable workflow and assess personal data before sending media.
Retained content
| Content | Operational rule |
|---|---|
| Portal conversations | Encrypted; saved after completed answers; expire 30 days after latest save |
| Stored Responses context | Encrypted in Netter and isolated by user/tenant; default retention 30 days |
| Stateless Chat Completions | Gateway does not retain content after completion, apart from explicitly configured optional features |
| Optional company S3 archive | Customer manages destination and object retention |
| Consulting codebases | Deleted 30 days after report delivery |
| Consulting reports | Available for one year |
Accounting records do not contain the prompt. Portal invoice copies do not replace official fiscal retention. Read Archive and monitoring for S3 rules.
Export personal data
Choose Privacy → Esporta i tuoi dati to request a personal export. It covers your user in the current tenant rather than all other members' content.
Request deletion
Use Richiedi la cancellazione and read the confirmation. The procedure revokes keys and removes the specified local content. Identity-provider completion and fiscal retention obligations may need further action by Netter.
Objects already delivered to the customer's S3 bucket remain under the customer's control. Local deletion does not automatically remove them.
Read the applicable Privacy notice and Data processing agreement.