Your data should stay under your control

Depending on the configuration, local processing or a protected infrastructure in the EU is used. The specific configuration depends on the contractual terms.

For sensitive data, local processing or hosting in a protected European infrastructure is intended, including AWS Bedrock in Frankfurt.

Customer names, site addresses and contact details are processed as sensitive information. The scope of processing depends on the configuration and the contract.

Access depends on organisation, project, role and assigned permissions. Not every user sees all projects of the company.

Data is separated by organisation and project: information about one site should not mix with that of another.

Users' actions are logged so that it can be traced who worked with a document, a task or a decision, and when.

Data can be deleted on request. Retention and deletion policies depend on the system configuration and the contractual terms.

Backup copies are created within the chosen infrastructure; the retention periods of the copies are agreed contractually.

Documents are processed for search, analysis and the preparation of drafts. Your project data should not be used to train public models.

The use of external sources and services is controlled and restricted by the configuration. Where external services are involved, this is recorded in the contract documents.

The system is being developed taking the requirements of the GDPR/DSGVO into account; when processing data on behalf of the customer, the conclusion of a DPA (AVV, Auftragsverarbeitungsvertrag) is planned.