Your company's knowledge, under your control
Munimen holds what your company knows. Here is where it lives, how it's protected, and who can reach it.
Sovereignty
Munimen holds what your company knows. So everything is built to keep it yours: hosted in France, processed on our servers, and never used to train a model.
Data residency
Hosted on AWS in the Paris region, France. Your documents, their index and your conversations are all stored in Paris.
Processed on our servers
Indexing, embeddings and reranking run on Munimen’s own infrastructure. By default, there is only one external AI provider: Mistral AI, a French company.
The model you choose
You pick each team’s model: Mistral included, OpenAI, Anthropic or Google, in your own cloud with Azure OpenAI or Amazon Bedrock, or on your servers with Ollama.
No training
Your data trains no model, not ours and not anyone else’s. It is only ever used to answer your own teams’ questions.
Security
Encrypted everywhere, isolated per company, open only to those who should see it. And for the most demanding sectors, your own key and isolated enclaves.
Encrypted in transit and at rest
Envelope encryption with AWS KMS. Files and passages are encrypted at rest, and everything in transit is encrypted too.
One key per document
Each indexed document has its own key, which encrypts all of its passages. That key is itself encrypted by the key dedicated to your company in AWS KMS.
Isolation per company
A database schema and an encryption key dedicated to each organization. Only accounts and access are managed in common.
Your own key
Optionally, on request, an extra company key kept outside AWS in your own key store (XKS). You can cut off access at any time.
Isolated enclaves
For high-stakes sectors, and on request, processing can run in AWS Nitro Enclaves, isolated and out of reach even for our own team.
Access control
You reserve documents for a team, and memory stays within its space. The glossary and entities are shared company-wide.
Enterprise authentication
Email and password, magic link, passkeys, two-factor authentication, or your company’s SSO with SAML or OIDC.
Sessions under control
You’re alerted whenever someone signs in from a new device, and you can see and close all your active sessions at any time.
Guard
Rules you define keep certain content from ever being indexed, so it never comes up in answers, whatever the question.
Questions IT teams ask
Short answers to the questions your IT team and your DPO will ask first.
