SECURITY AND DATA PROTECTION
Built for companies that take data protection seriously
Data protection is not an add-on for us, it is a design principle. Your AI employees run in Germany, act only with your approval and store no more data than necessary.
Hosted in Germany
The platform and the AI models run on our own infrastructure in Germany. Your documents and messages stay in the country.
GDPR-compliant
We process your data in accordance with the GDPR and conclude a data processing agreement (AVV) with you.
No training on your data
Your documents, messages and business data are never used to train AI models, neither ours nor those of third parties.
Human approval
Nothing leaves your company and no system changes without a person approving it. Interrupted actions are never repeated automatically.
Secure access
Single sign-on with two-factor authentication, automatic logout and protection against password attacks. Access rights are granted per company and role.
Encrypted credentials
Access data for your systems is stored with strong encryption and cannot be read out again through the platform.
AI MODELS
European AI by default, external models only with your consent
By default, we operate the AI models behind your AI employees on our own infrastructure in Germany. Your documents, messages and business data are not sent to U.S. AI providers. For processes with less sensitive data, you can choose models from providers such as Anthropic or OpenAI instead. We make this choice together with you for each process individually, and never without your explicit consent.
- Default: AI models running on our own infrastructure in Germany
- No transfer of your data to U.S. AI providers without your explicit consent
- External models only on request, decided for each process individually
DATA MINIMISATION
Only as much data as necessary
Process histories are deleted automatically after 30 days- Key figures contain no message content and count users without naming them
- Personal memory only on explicit request, visible and deletable at any time
- Emails are never copied into the knowledge base
- Strict separation of data between customers
PERMISSIONS
Access rights you define
Each AI employee only gets access to the systems and functions it needs for its role. Where users connect their own accounts, it acts with exactly their permissions and never more. Standing approvals can be limited in time and revoked at any time.
Questions about data protection?
We are happy to go through your requirements and provide our data processing agreement.