Data protection in AI processing

Before the question you send reaches any AI model, Expert Consilium automatically removes certain personal and identifying data from it and replaces them with neutral placeholders. The models analyse the situation without that data, and your report shows the real values. This page describes exactly what we remove, what we do not remove, and the limits of this measure.

Last updated: 16 October 2026.

What is replaced automatically

Email addresses; phone numbers in international (+381...) and Serbian domestic (06x..., 011...) format; IBANs; bank account numbers in the Serbian 123-4567890123456-78 format; payment card numbers; Serbian personal identification numbers (JMBG); tax identification numbers (PIB, VAT or Tax ID) and company registration numbers when they are labelled in the text, for example “PIB: ...” or “Registration number ...”. Each value receives a placeholder such as [EMAIL_1] or [PHONE_2], and the same value always receives the same placeholder within one consultation.

What is not replaced automatically

Names of people, company names, addresses, amounts, dates, contract and invoice numbers, and the description of the business situation itself. We deliberately leave amounts and dates unchanged because the analysis needs them. Names of people and companies cannot be detected reliably, so we do not claim to remove them.

How you can hide names and other details yourself

Text you put in double square brackets, for example [[Acme Ltd]] or [[John Smith]], is treated as confidential: the models receive only a placeholder such as [PRIVATE_1], and your report shows the real name. You can mark any other detail you do not want passed to the models in the same way.

Where it applies

To every AI model call related to your request: all stages of the consultation (separate AI perspectives, cross-check and synthesis), the follow-up question after the report, the automatic conversation title, the inappropriate-content check before processing, and the tier recommendation on the contact form.

What happens to the real values

The link between placeholders and real values exists only in the server's working memory while a single request is processed. It is not written to logs and is not sent to AI providers. Before anything is stored or shown, placeholders are replaced with the real values, so your question and report in your account, and the email confirming receipt of your request, contain the data as you entered it. We keep that data in line with the Privacy policy.

What this measure is not

Replacing data with placeholders is pseudonymisation, not anonymisation: the rest of the description, for example a combination of industry, city and amounts, may still make it possible to identify who is concerned. Detection works by format and check digits and cannot guarantee that every item will be recognised, for example a phone number written out in words or in an unusual format. We therefore recommend including only the data the analysis needs and marking names as described above.

Relation to other measures

This measure complements, and does not replace, the Zero Data Retention routing described on the Confidentiality page and the rules in the Privacy policy.

Contact and changes

Send data protection questions to support@expertconsilium.com. We update this page when we change how data is processed; the date of the last change is shown at the top.

Confidentiality and Zero Data Retention →