How RegMatrix handles your data

Determinations are regulatory orientation to help you plan. Confirm them with your notified body, regulator or qualified consultant before relying on them. Every determination lists the points to verify.

Files with a text layer are read in your browser and only the extracted text is sent for analysis. Scans and photos are uploaded to private storage, read by the AI, and deleted as soon as the text has been extracted.

We keep the findings, references and decisions, not the document.

Standards are the copyright of their publishers. We store designations, titles, editions and status, never the text. Clause-level comparisons require a licence your organisation holds; the standard's text is processed for that comparison and not kept.

Purchases go through the publisher, an authorised store or a disclosed partner, and are licensed to your organisation. Registry data includes ISO Open Data, licensed under ODC-By 1.0, and FDA data.

Each workspace chooses its AI: its own Anthropic or OpenAI key, stored encrypted and used only for that workspace, or RegMatrix AI. AI features send the minimum context needed to the provider's API.

The assistant's memory of your workspace is visible on the Memory page, where you can edit or delete any entry. Deleting removes it permanently.

Workspace data is isolated per workspace. Owners can remove members, export every report and ask us to delete the workspace.