Zum Inhalt springen
Security & Privacy

Your data belongs to you.
Full stop.

Organisational knowledge is the most sensitive asset a company has. That's why data protection isn't something we added later – it's been part of the architecture from day one.

The key facts

Hosted in Germany

All infrastructure and services run on German servers. No data leaves Germany. The platform operates inside a closed virtual private cloud.

GDPR-compliant & independently reviewed

Privacy by design from day one. Qualitybase accompanies our product development as an independent data protection consultancy and external watchdog.

AI made in Europe

All AI-related services are developed and continuously adapted in line with the EU AI Act.

Complete tenant isolation

Every organisation operates in its own fully isolated environment. There is no shared data layer – not for documents, not for knowledge, not for search results.

Encryption

All communication is encrypted via HTTPS. The connection to the GPU server for speech recognition and embedding runs through a dedicated VPN tunnel.

Role-based access control

Every user has a defined role – expert, knowledge seeker, or administrator. Who gets to see what is managed at the organisation level.

Hallucination-free

EPINOIA only answers based on captured knowledge. If a piece of information hasn't been recorded, the system says so explicitly – rather than making something up.

Full deletion

On request, all tenant data is completely and verifiably removed – documents, interviews, user records, everything. The deletion process is logged.

Data export at any time

All data can be exported before cancellation – documents as well as interview transcripts. The knowledge you've built up belongs to you, not to us.

Still have questions about data protection?

We're happy to answer them personally.

Get in Touch

Possible concerns