sūveryn › Notaries
Your data. Your premises. Your AI.
Clients bring a notary what they trust to no one else: identity details, family situations, wealth, the price of a home. Sūveryn gives your office AI that reads, checks and drafts from those documents on a server you own, in your own office. Nothing goes to a cloud provider, a model vendor or an AI start-up in between.
Most cloud-based AI tools send your documents to someone else’s servers. With sūveryn, the model, the documents and every question your team asks stay on hardware you control. It works fully offline and even air-gapped, so a deed, an estate inventory or a marriage contract never touches the internet.
Open a sale case, add the private agreement, the title deed and the certificates, and sūveryn reads the thirteen facts the deed needs: parties, property, cadastral data, price, guarantee, dates, suspensive conditions, title, energy certificate, soil certificate and occupancy. Each fact sits next to the passage it was read from, and a figure, date or name that isn’t in that passage is flagged. Nothing is final until someone in your office has checked and confirmed every fact. The confirmed summary is stored in the case and can be downloaded as a Word file.
Many “legal AI” products are wrappers: a branded interface that sends your prompts and files to another company’s model, often in another jurisdiction. Their answer to confidentiality is a contract: an EU region, a no-training clause, a retention limit. As the CCBE puts it, “the less we control the stack, the more we must ensure the control by contractual obligations to the provider and rely on promises from a vendor.” Sūveryn takes the other route. Nothing leaves your premises, so there is nothing to negotiate, and you can prove it: switch it to air-gapped mode and it keeps working.
| A typical AI wrapper | Sūveryn | |
|---|---|---|
| Where the model runs | On the model provider’s servers | On your server, on your premises |
| Who receives your documents | The tool vendor and the model provider | No one outside the office |
| What protects your data | Contract clauses: region, retention, no training | Architecture: nothing leaves, even air-gapped |
| Can you check what it does | Closed code | Open-source code and published limitations |
| Works without an internet connection | No | Yes |
| If the vendor changes terms or stops | The service changes or stops | Code (AGPL) and models (Apache 2.0) stay with you |
| Answers checked against the sources | Depends on the product | Each citation checked against its passage; sums calculated by the server |
A notary can’t sign off on a fact they can’t trace. Every sūveryn answer and every fact cites the passage it rests on, with the page, and opens it with the sentence marked. Each citation is checked against its own passage: a figure, date or name that isn’t there is flagged, like the deed date in the example below, which the agreement only gives as “four months after signing”. Sums are calculated by the server, not by the model. And text inside a document is never treated as an instruction, so a planted line in a document can’t steer the answer.
Client data in a notary office is covered by professional secrecy, and the notariat’s own GDPR code of conduct was approved by the Data Protection Authority on 8 April 2021. Every cloud AI tool adds a party that receives those files: the tool vendor, and often a model provider behind it, each with its own terms on storage and retention. For lawyers, Europe’s bars have drawn the conclusion: the CCBE’s technical guide on AI tools (27 March 2026) calls on-premise deployment “the most secure option regarding the respect for confidentiality”. A notary’s secrecy is no lighter. With sūveryn there is no outside party: the files stay on your own server, under your own access controls.
Clients give a notary their most personal information because they trust it stays in the office. With sūveryn you can tell them in one sentence where it goes: nowhere, it stays on our own server. You decide who uses it and on which files, each case keeps a log of who did what, and you start with a pilot on closed files before anyone relies on it.
Sūveryn ships with two open-weight models, Qwen3.8-27B and Mistral Small 3.2, and your people choose the model per conversation. No model vendor sees your work. It runs on one server with a 24 GB NVIDIA GPU (RTX 4090 class).
Hosting it with your IT provider instead of in your own office needs a data-centre GPU; contact us before planning that.
The code behind sūveryn is open source, so anyone can inspect it: your IT team, an outside security firm, a sceptical partner. That is the point. A tool that holds clients’ files shouldn’t ask for blind trust. The code is public; your data never is. Read the Sūveryn Manifesto for why we build this way.
Public AI services process your prompts on the provider’s servers, and terms on retention and training vary. For files under professional secrecy, that is hard to justify to clients. Sūveryn keeps everything on your own hardware.
No. It runs fully offline and supports air-gapped networks, and new models arrive as signed bundles you can install without a connection.
No. Deed intake reads and checks the facts the deed needs and gives you a summary confirmed by a person, as a Word file. Drafting from your office’s own deed templates is not available yet.
Any file whose documents you can upload: a sale, an estate, a gift, a company formation, a marriage contract. Deed intake, the first playbook, is for sales; more playbooks for notarial work are in development.
Not at everything: the largest cloud models are stronger at open-ended reasoning. For your own files, what counts is that each fact and answer rests on the documents and can be checked. Sūveryn cites the page, checks every citation and flags what it can’t trace. We tested it on real Belgian notarial deeds and publish the results, limitations included.
Sūveryn is in development. Join the waitlist to run a pilot on your own files.
Join the waitlist to run a pilot on closed files, on a server in your own office, and judge the answers yourself.
Sūveryn for other practices