How the AI Assistant Works

What the assistant is

In the top right of the GDPRWise app you will find the AI assistant. You ask a question in plain language, in Dutch, English, French or German, and the assistant answers in the language of your question. It is included in certain subscription plans and switched on by an administrator.

The assistant is a guide, not a lawyer. It explains what the GDPR expects, what GDPRWise material recommends, and what your own dossier shows. For a decision with legal consequences, ask an advisor.

Where the answers come from

The assistant does not answer from general internet knowledge. It draws on two sources only:

• This knowledge base. Before it answers, the assistant searches the GDPRWise articles and course lessons for the passages that match your question. Every answer lists the articles it is based on, so you can read further.
• Your own dossier. When you ask about your own situation, the assistant looks up the relevant parts of your dossier: processes, data items, third parties, compliance items and open scan findings. An answer about your dossier includes buttons that take you straight to the item.

When you open the assistant, it already suggests the most useful next steps for your dossier. The assistant only reads your dossier. It never creates, edits or deletes anything; every change still goes through the normal screens.

When there is no answer

Sometimes the knowledge base has nothing on your question. In that case the assistant says so and shows the message “There is no guidance on this yet” instead of guessing. That is deliberate: an answer without a source is worth less than no answer.

You can then send your question to questions@gdprwise.eu, or to the partner that supports your account. Questions the assistant could not answer are exactly what we use to decide which articles to write next.

For a question with several parts, the assistant answers the parts it can and names the part the knowledge base does not cover.

What is stored, and for how long

Every conversation is stored under your own account so you can reopen it later. It is kept for 90 days and then deleted automatically.

• Colleagues do not see your conversations. A conversation belongs to the user who started it, even within the same company.
• The GDPRWise team can review conversations during those 90 days. We use them to improve the assistant and to add missing topics to the knowledge base.
• A fixed number of questions per day. Your subscription plan sets the limit, and the assistant shows how many questions you have left.

What is sent to the AI model

GDPRWise uses Mistral AI, a European AI provider, to generate the answers. For each question the model receives only what it needs:

• your question and the last few exchanges of the conversation, so follow-up questions work
• the knowledge base passages that match your question
• the parts of your dossier the question is about, when you ask about your own situation

GDPRWise has a zero data retention agreement with Mistral AI: once the answer is generated, Mistral keeps nothing of your question, the knowledge base passages or your dossier data. Your conversation history lives only in GDPRWise, under the 90-day rule above.

Nothing is sent when you are not asking a question, and the assistant does not have access to your account details beyond your dossier.

Limits worth knowing

• The assistant knows what is in the knowledge base and in your dossier, nothing more.
• It gives guidance based on GDPRWise material; it is not legal advice.
• It reads your dossier but never changes it.
• Answers about your dossier reflect the dossier as it is right now.