Solution · Workflows
Sovereign AI. Your data stays in the EU.
If you process sensitive data or are bound by confidentiality, you may not send it to just any AI service. Usually a provider with EU data centres that does not train on your data is the best choice. Where data must not leave the building, we run models locally.
What changes for you
-
Current models without data leaking
AI moves fast. An EU provider that contractually excludes training delivers new models continuously, without you buying new hardware.
-
Ask your own documents
Search manuals, contracts, policies or project files and get answers with sources.
-
Local when it has to be
For especially confidential data or environments without internet we run models on your own hardware. We tell you honestly when that pays off.
-
Small models for clear tasks
For a clearly defined task, such as classifying receipts, a specialised model is often more accurate and cheaper than a large language model.
What runs behind it
-
Providers vetted
EU data centres, a data processing agreement, no training on your data. We check that before any data flows.
-
Access with sign-in
Only authorised people, sign-in via your single sign-on, access logged.
→ -
Permissions are kept
The AI only answers from documents the person asking is allowed to open.
-
Experts from our network
For research-grade questions and custom models we bring in specialists.
Service or project
We run it for you, or your team takes over.
As a project with fixed scope and a fixed quote. If you want, we run the workflow afterwards and adapt it when things change.
For IT leads
Technical detailsEU providers · local models · RAG · SSO
- Providers
- EU data centre, data processing agreement, training on customer data contractually excluded.
- Local
- Models on your own hardware when data must not leave the building or there is no internet.
- Document search
- Answers with sources from your own documents (RAG).
- Permissions
- The AI only answers from documents the asking person may open.
- Access
- Sign-in via single sign-on, access logged.
Further reading
More on the topic
-
AI assisted attacks
Artificial intelligence changes above all the quality and the volume.
→ -
GDPR
The GDPR is the General Data Protection Regulation of the European Union (Regulation (EU) 2016/679).
→ -
Data processing agreement (DPA)
A data processing agreement (DPA) is the contract required by Article 28 GDPR wherever a provider processes personal data on behalf of, and on the instructions of, a company.
→
FAQ
Frequently asked questions
Local model or provider?
Usually an EU provider. Models improve every few months while your own hardware ages. Local pays off when data must not leave the building or there is no internet connection.
Is our data used for training?
No. We only use providers that contractually exclude training on customer data and process in the EU.
Is this GDPR compliant?
With EU processing, a data processing agreement and clean access rights the technical requirements are met. This is our view, not legal advice.
Who do you offer this to?
For regulated companies, professions bound by confidentiality and anyone processing sensitive data, and for companies of about 30+ staff with critical systems.
Discuss sovereign AI
Free first call
Briefly describe your situation. We help you assess it and plan the next step. Reply within 24 hours on working days.
Sovereign AI and local language models for businesses in Austria
vetosec advises on secure AI: EU providers without training on customer data, permission-aware document search, local models and specialised ML models.
office [at] vetosec [dot] at · vetosec.at/contact/