Where your data is

Every statement on this page has evidence: a line in PATRON's public code, a document or our own measurement. Anything that does not exist yet is labelled plainly as planned.

As of 16 September 2026 · PATRON 1.3.0

TodayPlannedNot claimed

01PATRON on the firm's computer

• Documents and index

  Today

  The database, matter documents and matter memory sit in the application data folder on the lawyer's computer, not on MateMatic's servers.

  Evidence:desktop/main.js, lines 200-201

• Local model

  Today

  With a local model (Ollama) the answer is produced on the firm's computer and nothing leaves the machine. You can work with no network connection.

  Evidence:routing/decideRoute.ts, line 81

• Cloud model

  Today

  It only works once the firm chooses a cloud model and enters its own provider key, because the installer contains no key. Choosing a cloud model is consent to send the passages needed for an answer, including in matters under professional secrecy.

  Evidence:llm/openrouter.ts, line 37desktop/main.js, lines 211-212ADR-0101: Operator consent

• Pseudonyms before sending

  Today

  Before a passage reaches a cloud model, PATRON replaces recognised personal data with pseudonyms. Recognition is not perfect, so do not treat it as anonymisation.

  Evidence:chat/stream.ts, lines 359-362

• Record of model calls

  Today

  Model calls in chat, document drafting and tabular review are written to the audit trail with the decision and the matter classification, without the prompt text. You can see whether and when a privileged matter went to the cloud.

  Evidence:chat/stream.ts, line 590PATRON audit trail

• No telemetry

  Today

  PATRON sends MateMatic no usage statistics and no crash reports. The code is open, so you can check this yourself.

  Evidence:PATRON code on GitHub

• Updates

  Today

  On start-up PATRON checks GitHub for a new release, downloads it on its own and installs it when you click or when you close the app. The PATRON_AUTO_UPDATE=off environment variable turns this off.

  Evidence:desktop/main.js, lines 151-166

• Database encryption

  Planned

  Today database encryption is an option switched on with the PATRON_DB_ENCRYPTION=on environment variable and is off by default. Planned: encryption on by default.

  Evidence:desktop/main.js, line 84

• Signed installer

  Planned

  The installer has no publisher signature today. Every release ships with SHA-256 checksums and instructions for checking them before you run it. Planned: a signed installer.

  Evidence:desktop/package.json, line 44Download and verify the checksum

• RFC 6962 conformance

  Planned

  The audit trail is a SHA-256 hash chain with a Merkle tree, verifiable offline. The tree is modelled on Certificate Transparency but is not yet fully conformant with RFC 6962. Planned: full conformance in PATRON 2.0.

  Evidence:audit-merkle.ts, line 30How the tree is built

02Repertorium and the website search

• Queries from the website

  Today

  We do not store the text of queries. What remains carries no content: the kind and approximate length of the query, the scope, the number of results and the response time. We checked this by measurement on 16 September: a query from the website raised the call counter while the query store did not change.

  Evidence:Privacy policy

• Limit without an account

  Today

  For the daily limit we count a hash of the IP address salted with a secret key and keep it for at most 48 hours. The code of this function lives in the website's private repository.

  Evidence:Privacy policy

• Corpus in the European Union

  Today

  The legal corpus sits in Cloudflare objects assigned to the EU jurisdiction. The Repertorium gateway code is not public.

• Tokens and access data

  Planned

  Access tokens and account data have no guarantee of EU storage today. Planned: EU jurisdiction before free MCP access opens.

03The matematicsolutions.com website

• Visit statistics

  Today

  We count visits without IP addresses and without cookies. The Cloudflare Web Analytics script measures page views and speed and stores nothing in your browser.

  Evidence:Privacy policy

04What we do not claim

• Certifications

  Not claimed

  We hold no ISO 27001 or SOC 2 certification and we do not claim one. Instead we show the code, the measurements and what is still missing.