How is my data encrypted?

Data is encrypted at rest with AES-256 and in transit with TLS 1.3. Tenant data is isolated using separate keys.

Where are data stored and AI requests processed?

The platform and data layer run on Hetzner infrastructure in German data centers. AI inference is a separate path: the provider and processing region depend on the model approved for the use case.

Which retention and training conditions apply?

The applicable provider and contractual conditions are shown for each approved model path. Zero data retention only applies to supported model providers where it is contractually assured.

Security & sovereignty

Security and digital sovereignty at meinGPT.

Security and digital sovereignty belong together. Organizations need to understand where data reside, when external providers are involved, who has access and which evidence is available.

We therefore consider platform operations, data storage, model processing, permissions and connected systems separately. This hub introduces each area and shows where to review the details.

Platform & data layer: Hetzner data centers in Germany
Information security: ISO/IEC 27001:2022-certified ISMS
Company: Independent German company

The main security topics at a glance. Choose the area you want to review. Each page explains the topic in detail and then links to the relevant technical details or evidence.

Data paths & modelsWhich data are stored, and when is a model provider involved?View topic Access & operationsWho may use, administer and review a use case in operation?View topic SovereigntyWhich parts does meinGPT operate, and where do external dependencies remain?View topic EvidenceWhich certificates, controls and documents can be reviewed?View topic SubprocessorsWhich external service providers are involved, and in which region do they process data?View topic

Data path

A request passes through several distinct areas.

The workspace, the meinGPT platform, an approved model provider and optionally an internal system serve different purposes. Each use case must make clear which stations are actually involved.

SecurityAccess and operations are governed by concrete controls.Identities, roles, model approvals and logs determine who can use and administer a use case.View topic SovereigntyServer location is part of the decision, not the whole answer.Control also includes model choice, data paths, system connections, contractual terms and realistic exit options.View topic

FAQ

Frequently asked security questions

Need a specific answer for your review?

kontakt@meingpt.com

Yes. meinGPT supports SSO via common identity providers including Microsoft Entra ID, plus role-based access control (RBAC) and multi-factor authentication.

Ask our security team

For questionnaires, technical reviews or a specific use case, our team provides the appropriate level of detail.

Contact the security team