# Sovereign AI. Your data stays in the EU.

Source: https://vetosec.at/en/solutions/lokale-ki/

If you process sensitive data or are bound by confidentiality, you may not send it to just any AI service. Usually a provider with EU data centres that does not train on your data is the best choice. Where data must not leave the building, we run models locally.

- **EU providers** no training on your data
- **Local** where needed
- **Permissions** are kept

## What changes for you

- **Current models without data leaking**: AI moves fast. An EU provider that contractually excludes training delivers new models continuously, without you buying new hardware.
- **Ask your own documents**: Search manuals, contracts, policies or project files and get answers with sources.
- **Local when it has to be**: For especially confidential data or environments without internet we run models on your own hardware. We tell you honestly when that pays off.
- **Small models for clear tasks**: For a clearly defined task, such as classifying receipts, a specialised model is often more accurate and cheaper than a large language model.

## What runs behind it

- **Providers vetted**: EU data centres, a data processing agreement, no training on your data. We check that before any data flows.
- [**Access with sign-in**](https://vetosec.at/en/solutions/single-sign-on/): Only authorised people, sign-in via your single sign-on, access logged.
- **Permissions are kept**: The AI only answers from documents the person asking is allowed to open.
- **Experts from our network**: For research-grade questions and custom models we bring in specialists.

[How we build in general](https://vetosec.at/en/how-we-build/)

## Service or project

**We run it for you, or your team takes over.**

As a project with fixed scope and a fixed quote. If you want, we run the workflow afterwards and adapt it when things change.

## For IT leads

Technical details: EU providers · local models · RAG · SSO

- **Providers**: EU data centre, data processing agreement, training on customer data contractually excluded.
- **Local**: Models on your own hardware when data must not leave the building or there is no internet.
- **Document search**: Answers with sources from your own documents (RAG).
- **Permissions**: The AI only answers from documents the asking person may open.
- **Access**: Sign-in via single sign-on, access logged.

## Further reading

More on the topic

- [**AI assisted attacks**](https://vetosec.at/en/it-security/ki-gestuetzte-angriffe/): Artificial intelligence changes above all the quality and the volume.
- [**GDPR**](https://vetosec.at/en/it-security/dsgvo/): The GDPR is the General Data Protection Regulation of the European Union (Regulation (EU) 2016/679).
- [**Data processing agreement (DPA)**](https://vetosec.at/en/it-security/auftragsverarbeitung/): A data processing agreement (DPA) is the contract required by Article 28 GDPR wherever a provider processes personal data on behalf of, and on the instructions of, a company.

## Frequently asked questions

### Local model or provider?

Usually an EU provider. Models improve every few months while your own hardware ages. Local pays off when data must not leave the building or there is no internet connection.

### Is our data used for training?

No. We only use providers that contractually exclude training on customer data and process in the EU.

### Is this GDPR compliant?

With EU processing, a data processing agreement and clean access rights the technical requirements are met. This is our view, not legal advice.

### Who do you offer this to?

For regulated companies, professions bound by confidentiality and anyone processing sensitive data, and for companies of about 30+ staff with critical systems.

## Related

- [Automated workflows](https://vetosec.at/en/services/automation/): automation with permissions
- [Solutions](https://vetosec.at/en/solutions/): Nextcloud, SSO, backup, clusters
- [Gap analysis & consulting](https://vetosec.at/en/services/gap-analysis/): ISO 27001, NIS2, GDPR

## Sovereign AI and local language models for businesses in Austria

vetosec advises on secure AI: EU providers without training on customer data, permission-aware document search, local models and specialised ML models.

Updated: October 19, 2026

Provider: vetosec, Dipl.-Ing. Samuel Ziegler, BSc, Berndorf, Lower Austria, Austria. Contact: https://vetosec.at/en/contact/