Your data. Your server. Verifiable.
For us, privacy is not a footnote in the contract but an architecture decision you can verify in the deployment.
Hosted in Germany and the EU
We run applications on Hetzner infrastructure in Germany or directly on your servers. No mandatory US hyperscaler. You decide where your data lives — we set it up and document it.
Self-hosted AI that never has to leave your building
Our self-hosted setups run open-source models on your infrastructure. Your documents and queries do not go to external AI clouds. Which components run where, and whether any service makes external calls, is disclosed transparently before you sign.
GDPR by design
GDPR by design means concrete decisions: self-hosted fonts instead of Google CDNs, data minimization, consent only where needed, EU analytics, transparent external services, DPA on request, and WCAG-oriented accessibility. Compliance is still an interplay of technology and your processes — we deliver the technical foundation and state clearly what remains on your side.
No lock-in — provably
Source code, models, and data are handed over. Infrastructure as code, documented deployments, export paths. You can self-host, switch, or take over internally at any time. A provider working like this has to win through quality — not through dependency.
Security in operations
Security patches and dependency updates in all care plans, automated backups with restore tests, monitoring with alerting, incident response with clear responsibilities, and least-privilege access control.
Our commitments
- Hosting location Germany/EU — or your own infrastructure
- Self-hosted AI option: your data stays on your systems
- Complete handover of source code and models
- Data processing agreement (DPA/AVV) on request
- Transparent disclosure of all external services before signing
- No sharing, no selling of your data
Note: We are a software provider, not legal counsel. Statements on this page describe our technical implementation and do not replace data protection legal advice.