AI Consulting

GDPR-compliant AIfor companies.

Many companies want to use AI but are not allowed to feed ChatGPT internal data. We set up AI so personal and confidential data stays under your control — with local or EU-hosted models.

  • Local and EU-hosted language models
  • Clear rules for personal data
  • Governance aligned with the EU AI Act
  • Provable: ISO 27001 and TISAX certified
Book a meeting

In short: GDPR-compliant AI means personal data is processed by AI systems only on a legal basis, in controlled environments and without uncontrolled transfers to third countries.

When is AI GDPR-compliant?

What matters is the legal basis, purpose limitation, data minimisation and where processing takes place. If data is transferred to providers outside the EU, additional safeguards are needed. Local or EU-hosted models avoid many of these questions from the start.

A checklist to get started

Which data will be processed? Where does the model run? Who can access inputs and logs? Is there a data processing agreement? Is the use documented in the record of processing activities? We go through these points with you before writing any code.

Technically implemented

We run models on local GPU infrastructure or with EU providers, connect them through chat frontends such as Open WebUI and manage access centrally, for example via LLMrouter.eu.

Häufige Fragen

Answers to the questions we are asked most often about GDPR-compliant AI.

It depends on contract, settings and data. For confidential or personal data we recommend local or EU-hosted alternatives.

Innovation from Munich.Active worldwide.

Talk to us about your cloud, DevOps and AI initiatives — no obligation, directly with our engineers.