# The company realm: one governed data layer for every mandate

> Mindro's company realm is a governed data layer: all confidential client and deal data in one environment in Europe, every data access logged by user, tool and time, and no training on your data.

URL: https://www.mindro.co/company-realm
Last updated: 10 October 2026

**Short answer:** The company realm is Mindro's governed data layer. All your confidential client and deal data is processed in one compliant environment, stored and processed in Europe, and never used for training. Every data access is logged by user, tool and time, so it is fully traceable and auditable. When other AI tools are connected in an Institutional setup, Mindro and your firm agree which data each tool may use.

Diagram: Diagram of the Mindro brain in three layers. Your firm's documents and client materials feed the bottom layer, the firm brain: what your firm knows, including sector knowledge, deal precedents, buyer behaviour, and models and IM templates. Above it sits the deal layer, a digital twin of the target covering financials, commercial, operations, people, market and legal, with every figure traceable to its source. The top layer shows the outcomes: IM creation, pitch preparation and buyer matching. A side band notes that everything is secure and governed: EU storage, full audit trail and tenant isolation.

## An end-to-end AI stack for advisory firms

Mindro is an end-to-end, full AI stack for corporate finance and M&A advisory firms, including those in regulated settings. Everything in Mindro is secure and governed: full traceability and auditability, and data stays in Europe. Mindro orchestrates Claude, Gemini and Mistral.

## What the company realm does in every setup

- **One governed environment.** All confidential client and deal data for a mandate is processed in one compliant environment.
- **Every data access logged.** Each access is logged by user, tool and time, so who saw what, and through which tool, can be traced and audited.
- **Data in Europe.** Data is stored and processed in Europe.
- **No training on your data.** Your data is never used to train models.

## Classification-based access per tool (Institutional setup)

When a firm connects other AI tools to Mindro, such as Claude, ChatGPT, Microsoft Copilot or Grok Bot, Mindro and the firm agree which data levels each connected tool may use, based on the firm's NDAs and policies. This is configured per client in the [Institutional setup](https://www.mindro.co/institutional); it is not part of the standard product.

### How we typically configure this

The levels are agreed with each client. A framework we often start from uses four levels:

| Level | Name | Rule of thumb | AI tools typically allowed |
|---|---|---|---|
| 1 | **Public** | Public information with no client, mandate or project identifiers | Any AI tool |
| 2 | **Internal** | Firm know-how and licensed data, nothing client-confidential | Firm-approved enterprise AI that contractually doesn't train on your data, plus Mindro |
| 3 | **Confidential** | Client and deal material under NDA | Mindro, plus enterprise tools the client specifically approves |
| 4 | **Restricted** | Inside information, clean team data, or an NDA that limits third-party processing | Mindro only |

The names are close to the scale most compliance officers already use in their information-security policies, and to Microsoft's default sensitivity labels, so firms can map them onto the labels they already use. The final levels and tool permissions are whatever the client and Mindro agree.

## Opening the brain to other AI tools (connected setup)

In a connected setup, MCP and API connections are configured per client on request, so approved agents such as Claude, ChatGPT, Microsoft Copilot and Grok Bot can use the firm brain, and Mindro's desks, within the access the client has agreed for each tool under its NDAs and policies. Mandate data stays in Mindro unless the client approves otherwise. It is not part of the standard product. [Setups for institutions](https://www.mindro.co/institutional)

## Why this matters for IM creation

The digital twin behind each IM is built from confidential client materials. The company realm keeps that material in one governed environment in Europe, logs every access, and keeps every figure in the IM traceable to its source.

## Proof points

- The standard SaaS runs fully in Europe and EU data residency is guaranteed.
- Every data access is logged by user, tool and time: fully traceable and auditable.
- We do not train on your data.
- Model choice: Mindro orchestrates Claude, Gemini and Mistral.

[The firm brain](https://www.mindro.co/firm-brain) · [Security and trust](https://www.mindro.co/security) · [Integrations](https://www.mindro.co/integrations) · [Book a briefing](https://www.mindro.co/contact)