Security and compliance
Your data, your rules.
Everything your procurement, IT or data protection officer will ask, on one page. What is written here, we sign.
Before we start
What we sign before we see a single document
- NDA
- By default, before the evaluation. We sign yours or send ours.
- Data processing agreement
- Under Article 28 GDPR, signed before any data is transferred. It sets purpose, data categories, retention and return or deletion at the end.
- Scope and price
- A fixed price and a target number are agreed before we touch your data.
During the project
Where the data sits and who sees it
- Location
- Training runs in the EU: on our own capacity in Sevnica or with vetted EU providers. Data does not go to providers outside the EU or into third-party APIs.
- Access
- Only the engineers working on your project. No account managers in between and no subcontractors without your knowledge.
- Purpose
- Your data is used only for your model. Not for other customers and not for our public models.
- No data transfer
- If data may not leave the building, we run training and evaluation on your hardware.
In operation
The model runs with you, every step is logged
- Deployment
- On your servers, a laptop, an air-gapped machine or EU hosting. Your choice.
- A person approves
- Each agent has a set level of autonomy. Outgoing messages, quotes, prices and contracts are always approved by a named person. One command stops everything.
- Log
- Every agent step goes into a log where each record is linked to the previous one, so any change or deletion shows up. Inputs and outputs are stored as hashes; personal data is not copied into the log.
- EU AI Act
- Every model has a card with its purpose, training data and measured results. We add disclosure texts where Article 50 requires them.
At handover
What stays with you
- Weights and datasets
- Weights, adapters, training datasets and evaluation sets. You can run or move the model without us.
- Your data
- At the end we return or delete it, your choice, as Article 28 GDPR requires, and confirm deletion in writing.
- No lock-in
- Open models and standard formats (GGUF, safetensors). No per-call licence and no platform of ours to keep paying for.
Our AI Act review is technical documentation, not legal advice. For legal questions, talk to a lawyer.
Your procurement's questions, answered in a day.
Send your questionnaire or list of requirements. We answer in writing, point by point.