Where your data is and who sees it.

You stay in control of your data. souveraen.ai checks access permissions on every request, logs queries and actions, and only changes anything in your systems after approval. No model is trained on your data.

Free for one user, hosted in Germany

Where your data is processedper deployment type
Location
Data centres in Germany
Network
Access over the internet
Models
Open-weight models in hosting
External models
no storage, chat and search in the EU
Hardware
none of your own needed
  • Access check on every request
  • No training on your data
  • Changes only after approval

Rules that apply in every deployment type.

Your data stays separate

Documents, search index and logs are kept separate from other customers.

Tenant Müller MaschinenbauExample

External models without storage

In On Demand, providers do not store requests and answers. Chat and search run in the EU.

On Demand, external modelExample
External model for this chatReady

Contracts online

The data processing agreement (DPA) under the GDPR is available from Pro. The commitment under § 203 StGB (German professional secrecy law) for professionals bound by secrecy can also be signed online.

Contracts, Pro planExample
Sign the DPA onlineReady

The questions that hold up AI projects

TodayWith souveraen.ai
Nobody can say for sure whether a chat reveals other departments' content.Without permission nothing appears, neither a title nor a hit count.
An AI assistant is meant to act, but nobody wants to give it write access.Reading runs without asking, and every changing action waits for approval.
With many services, it is unclear whether input is used for training.No model is trained on your data, and that applies in every deployment type.

What happens behind every request

  1. Check permissions

    Each request establishes which workspaces the person may see.

  2. Log the query

    Queries and actions are logged, and the logs are kept separate from other customers.

  3. Approve the action

    Nothing changes in your systems before approval, and each tool's risk class is set in advance.

Who answers for this in the company

Data protectionConcludes the DPA under the GDPR online, from ProData processing is covered before real documents are processed.
Secrecy-bound firmsSigns the commitment under § 203 StGB onlineThe § 203 StGB duty is set out in writing for the use of AI.
IT managementChooses the deployment type by the data's protection needsWith Air-Gap data stays in-house, on Private Spark it leaves only if you opt in.
Information securityHas access checks and tenant separation shown technicallyThe team assesses the technology itself. There is no ISO or C5 audit yet.

For IT and data protection

  • Access check

    Every request checks which workspaces the person may see. Other content does not appear, not even as a title or hit count.

  • Processing outside the EU

    Reranking and image generation by external models may run outside the EU. On Private Spark, external models are optional, and with Air-Gap they are not connected.

  • Risk classes for tools

    Set at registration. Reading runs without asking, every action that changes something needs approval.

Frequently asked questions

Question not listed? Call us: +49 3744 365 2202

Which certifications do you have?

None yet. We have not yet completed an ISO 27001 or C5 audit. In the onboarding project, we show your IT and data protection team how access checks, tenant separation and logging work technically.

Is there a data processing agreement?

Yes, from Pro. The Free plan does not include a DPA and is meant for testing with non-critical documents.

Does our data leave the company?

Not with Air-Gap, and with Private Spark only if you switch on external models. With On Demand, the data is stored in your tenant in Germany.

Related features

Let us review your requirements together.

Free for one user, no credit card and no expiry date.

Free for one user, no credit card.No credit card
Start for free