The context you need.
Fewer sensitive details.
Moon Blur replaces the sensitive information it detects with placeholders before it is sent to the model. The values can be put back in the answer.
- Share what your request needs.
- Check what was detected and the context that remains.
- Review and validate the answer before you use it.
Masking is reversible. It does not guarantee that every piece of sensitive information is detected.
Protection at every layer.
From connections to backups, each layer of the platform has its own protection.
Encrypted connections
HTTPS on every connection, TLS 1.2 at minimum and TLS 1.3 offered, with HSTS.
Encrypted secrets
Tokens for linked accounts and connector credentials are encrypted in the database.
Account access
Two-factor authentication by app or by email, backup codes, and sign-out from every session.
Roles and audit log
Roles and permissions in workspaces, and an audit log of admin actions.
Backups
Daily database backups to a second server, in France.
Isolated computer
The commands of each conversation’s computer run in a separate container, with no network access.
Reference: Moon AI DPA, in particular Articles 5 to 8.
What is in place.
With its limits.
For each point: its scope, its status and the reference text.
GDPR
Measures in placeA record of processing activities, a published data processing agreement, data subject rights exercised from your account, and main hosting in France.
- Record of processing activities (Article 30).
- Published data processing agreement (Article 28).
- Full export of your data and account deletion from your settings.
- Consent recorded at sign-up, and one-click unsubscribe from emails.
- App and storage at OVHcloud, on servers located in France.
EU AI Act, Article 50
Compliant with Article 50(2)Generated images, videos and audio carry machine-readable marking that identifies them as AI-generated.
- Marking in the metadata of generated files (images, videos, audio).
- A notice below the message box: Moon AI is an AI and can make mistakes.
- The marking is not a cryptographic signature.
Moon Blur
Active on every planMore than 150 categories of sensitive data are detected and replaced with placeholders before sending to the model, then put back in the answer.
- Your own terms to mask from the Constellation plan.
- Detection can miss things; masking is reversible.
- It does not apply to images, voice or connector actions.
European infrastructure.
Named providers.
OVHcloud · France / EU
OVHcloud provides the infrastructure, the GPU servers and DNS. The app and storage are hosted in France.
Processing depends on the tools you choose.
Some model and service providers are located outside the EU. The DPA lists them, with the transfers and the safeguards that apply.
The documents you need to decide.
Find the texts that apply and what your organization needs.
Data processing agreement
Roles, measures, subprocessors and transfers.
Privacy policy
Processing and how to exercise your rights.
Legal center
Terms of the service and compliance.
Does your team have specific requirements?
Tell us about your usage, your hosting needs and the documents you expect. We can clarify the scope to review before you choose.