AI employees work with your data. That's why we treat data sovereignty not as fine print but as part of the promise: processing in Germany, encrypted in transit and at rest, and no use of your data for model training.
!These certificates apply to the hosting infrastructure in Germany (Hetzner) on which our systems run, not as a company certification of scoreprise.AI itself. The data centres are located in Germany and comply with the GDPR.
What your AI employees process serves your task only. No passing on to model providers for training purposes, no learning from your content. Full stop.
Exclusively in data centres in Germany (Hetzner).
TLS 1.2+ in transit, AES-256 at rest.
Role-based, on a need-to-know basis.
Fixed deletion schedule per project phase, earlier on request.
Operations, concretely
Processing exclusively in German data centres (Hetzner). Your data never leaves the EU.
Processing under GDPR, with a data processing agreement. Encrypted in transit (TLS 1.2+) and at rest (AES-256).
Service levels with clear response times: 4 hours for critical issues, 8 hours in normal operation.
NDA as standard. What stays with you stays with you, also in our collaboration.
Your AI employees' configurations belong to you. Full export to JSON, CSV and Markdown, at any time.
You see what your AI employees work with and what they deliver, before anything goes out.
“What you build with us belongs to you. No lock-in: your configuration and data are yours to export and take with you anytime.”scoreprise.AI · Hamburg
Exclusively in data centres in Germany (Hetzner). There is no transfer to third countries.
Yes. We provide a DPA during the contract process or on request. It bindingly governs purposes, duties and the handling of your data.
Access is role-based on a need-to-know basis, encrypted in transit (TLS 1.2+) and at rest (AES-256). Only the people working on your task see the relevant data.
No. Your data is not used to train models and is not passed on to model providers for that purpose.
According to a fixed deletion schedule per project phase and the agreed retention, earlier on request. Data minimisation is a core principle.
With a defined incident response process: containment, analysis, informing affected clients and statutory notifications within the deadlines.
They belong to you. Full export to JSON, CSV and Markdown, then deletion. No lock-in.