How we handle your data

Your tenant data is hosted in the EU, on AWS in Frankfurt (eu-central-1). Each tenant is logically isolated: data from one customer is separated from others, and cross-tenant access is denied by design.

The content you connect: your product catalog, your help and policy documents, and the conversations handled by the AI. We use this to answer questions, power search, and generate content for your brand, not to train shared models.

Hosting runs on AWS (eu-central-1). For language-model inference we use an external LLM provider; that inference can run outside the EU under EU Standard Contractual Clauses, and personal data is scrubbed before each model call. We do not use your data to train models.

Actions are written to an HMAC-signed audit log with 90-day retention. Order records are kept for 10 years where legally required (German tax law). Execution chains and change history show what the AI did, and why.

GDPR export and erasure are built in. You can export your tenant data and request deletion. Your data stays your data, and you can disconnect at any time.

The AI answers only from your approved sources and escalates when unsure. Human approval gates let your team review and control AI actions, and a person can step in at any point.