Verifiable,
not promised.
EU-processing controls live in the product. Certifications, a C5 report, and the DPA are in preparation — on request when available, not as finished deliverables today.
Data residency
Inference follows the selected model’s EU provider route — Amazon Bedrock, Azure OpenAI, Google Vertex, OpenAI EU residency, or a reviewed OpenAI-compatible host. App storage and backups stay in the EU.
Encryption
Traffic is TLS 1.3 end to end. At rest, conversations and attachments are encrypted with AES-256 using keys held in a German-operated HSM and rotated every 90 days.
Training exclusion
Training on customer data is contractually excluded with every provider we route to, and enforced at the API layer. Deleting a chat removes it from primary storage immediately and from backups within 30 days.
Access control
Business workspaces support SSO via SAML and SCIM provisioning. Admin actions are written to an append-only audit log, exportable at any time.
Try it.
Your data stays home.
Free forever for everyday chat. Sign up to save history. Pro is the individual catalogue; Pro Max is 5× capacity. Business Standard is the team plan.