Zarya
How we handle documents in the Laboratory
Edition of 16 September 2026. Below is the actual processing route and its limits.
Who receives the materials
Your materials have a single external recipient: Moonshot AI (the Kimi model, api.moonshot.ai). It prepares the draft analytical memo from the prepared text. That service runs outside Russia, so the prepared text is processed abroad. No other external recipients are part of the processing route: scan recognition is not enabled, and Yandex translation and text-generation services are not called.
What happens to the documents
Uploaded PDFs are encrypted on arrival and stored on our side. Text is extracted on our own server, located in Russia, in a separate process, with no external calls. Platform code then hides values found by formal patterns: passport details, bank account and card numbers, personal contacts. Only then is the prepared text sent for drafting.
What leaves and what stays
Only the prepared fragment text, your question, the side you stated, the decision description and the review date are sent. Not sent: original PDFs, filenames, the table linking hidden labels to original values, your credentials and your company record in our system. We record the exact payload and its checksum, so the transmission can be verified.
Limits of this preparation
Hiding values reduces the amount of sensitive information but is not anonymisation and does not guarantee that a fragment cannot identify the parties. It works on formal patterns, so an unusually formatted identifier may remain. Public company details — name, corporate tax ID, registration number — are not hidden: the analysis would be meaningless without them. Send personal data only to the extent your question requires.
Materials that are not accepted
Do not upload materials covered by attorney-client privilege, state secrecy, a formally established trade-secret regime, or a ban on processing outside your own perimeter. If such a category is declared, the server stops the analysis before anything is sent to the external service. Such materials require separately agreed arrangements.
Human review is mandatory
The memo is prepared automatically and may contain errors. Every statement carries the document, page and source fragment, and you confirm it yourself. The final conclusion is confirmed separately, and editing the text resets earlier confirmations. Until the review is complete the memo cannot be exported. No internal machine check counts as proof of correctness.
Retention and deletion
Documents, intermediate materials and memos are stored encrypted. With pilot access they are kept for 30 days from the upload of a document or the creation of a memo, and a notice is sent seven days before deletion. On paid plans materials are kept for 12 months, and taking out a plan extends the storage of materials already uploaded. When the period ends, materials are deleted automatically. Your workspace holds 200 MB. You can delete your own documents in the cabinet at any time. Revoking access closes the workspace entirely. Content is visible only to members of your workspace: administrators see the access terms, status and our own costs, not documents or memo text.
Processing limits
Processing is designed for PDFs with selectable Russian text: up to 20 pages per set and one main question per set. The number of analyses depends on your access terms, and pilot access includes three. Scan recognition is not part of the standard route and is enabled only by separate agreement. Without it, a set containing scans is stopped before any external call. Re-generation is not available to the user, and a technical failure does not consume an analysis.