Zum Inhalt springen

The frame

Security and privacy

Where processing happens, what it rests on and what we do not do. Without a parade of badges.

Position

What we do not need, we do not store.

The points below are also in the data processing agreement. What is not there, we do not promise here.


  1. 01

    Processed in the EU

    Application, database, file storage, language models and transcription sit in European data centres. You get the list of services and processing locations before signing.


  2. 02

    No training on your content

    The models we use run without a training licence. Your documents do not improve anyone else’s model.


  3. 03

    Separation between tenants

    The access check sits in the database itself rather than in the application in front of it — a bug in the interface cannot bypass it.


  4. 04

    Restraint with personal data

    Specially protected fields are replaced before processing, not redacted afterwards.


  5. 05

    Deletion on a deadline

    Enquiries and bookings made on this site are deleted automatically after a set period.


  6. 06

    No third-party scripts

    This website loads no fonts, maps, videos or counting pixels from anyone else — hence no consent banner.


AI Act

Classified, not asserted.

Every workflow carries its legal basis and risk classification, derived from the fields the workflow actually reads rather than from a self-assessment.

  • Transparency — wherever a result goes outside, it is visible that a system was involved.
  • Assessment of people — workflows that evaluate individuals run on the device only and never without human release.
  • Processing record — every run leaves behind what it drew on and who released it.

Operation

Two routes, the same software.

Hosted

Run by us in a European data centre, including setup, backups and updates. The usual route.

On your own infrastructure

Installed in your data centre, for organisations with their own infrastructure or particular obligations.

The list of subprocessors, with processing location and purpose, is part of the data processing agreement — before signing, not after.

Reporting

If you find something.

Please tell us about a vulnerability before you publish it. We reply within three working days and credit you by name if you want. We do not take legal action against people who report responsibly.

Nächster Schritt

Dreißig Minuten, in denen Sie sehen, ob es passt.

Kein Verkaufsgespräch: Sie schildern einen konkreten Fall aus Ihrem Haus, wir zeigen daran, was die Applikation tut — und wo sie an ihre Grenze kommt.