SovereigntyΚυριαρχία

It runs where you do.

The whole platform is self-hosted inside your perimeter. The corpus, the relationship graph, the inference and the text capture all run on infrastructure you control, with no public-cloud or hosted-API runtime dependency.

Λειτουργεί μέσα στη δική σας υποδομή. Το σώμα της νομοθεσίας δεν φεύγει ποτέ.

One boundary, one direction.

Public legal sources come in, read-only. Nothing about the corpus, your queries or the answers goes out.

YOUR PERIMETER · TIER 0 / 1 EGRESS GUARD

Corpus archiveOriginal ΦΕΚ PDFs and derived artefacts, with checksums.

Relationship graphTyped, dated relations and consolidated versions.

InferenceOpen-weight models served on in-perimeter GPUs.

Text captureLocal document model with a deterministic cross-check. No cloud OCR.

SearchFull text, local embeddings and reranking.

GovernanceLaw, Gate and Receipt, running outside the model.

Two phases. Only the first touches the outside.

01 · AcquisitionA one-way, read-only fetch.Public legal sources are read: search.et.gr daily, the Internet Archive collection in bulk. Nothing is sent back.
02 · OperationEverything else stays inside.Processing, storage, search and inference run in the perimeter. After ingestion, the running system is operable air-gapped.

Each framework, at its true stage.

How THESMÓS addresses the frameworks its buyers work under. No framework is shown as certified until it is.

Compliance frameworks, how THESMÓS addresses each, and its current stage
FRAMEWORK	HOW THESMÓS ADDRESSES IT	STAGE
GDPR	Minimal-PII design, a retention schedule, an erasure and rectification workflow, and an immutable audit log.	ADDRESSED BY DESIGN
EU AI Act	AI-derived content is disclosed to the reader through the Claim rule; risk controls run through Law and Gate; receipts document each output. Classification is being confirmed with counsel.	IN PROGRESS
ISO/IEC 42001	AI management through the governance rules, an evaluation harness on every model change, and audit synthesis.	IN PROGRESS
ISO/IEC 27001 · SOC 2 Type II	Encryption in transit and at rest, role-based access and immutable audit, inherited from the platform's security posture.	IN PROGRESS
eIDAS 2.0 · EUDI	Passkey and OIDC professional access, with zero-knowledge proofs for privacy-preserving verification.	ADDRESSED BY DESIGN

Stages are confirmed with counsel before launch and change only when the underlying status changes.

What THESMÓS never does.

It does not send the corpus to a third-party model.

It does not use cloud OCR. Text capture runs on your hardware.

It does not tie you to one vendor. Storage, data and inference sit behind standard interfaces.

Bring your security team.

The controls briefing covers deployment, residency, the trust tiers and the compliance mapping, in the detail procurement needs.

Request the controls briefing