Security & sovereignty

Digital sovereignty at meinGPT has several layers.

Control comes from several decisions: Who operates the platform? Where are data stored? Which model processes a request? How are local systems connected? And how can a provider be changed?

Sovereignty depends on several decisions, not on a single location.

meinGPT and its data layer are operated by the independent German company SelectCode GmbH on Hetzner infrastructure in Germany. This provides a clear operating context for the platform, but it does not describe every aspect of a specific AI use case.

Model choice, connections to internal systems and the contractual terms of involved providers matter as well. We name those dependencies explicitly. For us, sovereignty means being able to distinguish, limit and change them when needed — not claiming complete independence.

Example: connect a local system through Outpost

Outpost establishes the connection from inside the company network. The specifically approved service determines which data flow across it.

In the platform

What can be controlled and reviewed in practice.

Company and platform

meinGPT is a product of the independent German company SelectCode GmbH. The platform and data layer run on Hetzner infrastructure in Germany.

Models

meinGPT is not tied to a single model vendor. Workspaces can use multiple approved providers, while region and contractual terms remain visible and separately assessable for every model path.

Local connections

Outpost connects approved local document collections and, in the controlled preview, services over outbound HTTPS. No inbound firewall port is required, and a machine's access can be revoked centrally.

Verifiable details

Operator
Independent German company SelectCode GmbH
Platform and data layer
Hetzner infrastructure in Germany
Models
Choice of multiple approved providers
Local connections
Outbound HTTPS without an inbound firewall port; access can be revoked centrally

Important context

Sovereignty is not a claim of complete independence. External models, hosting providers and other services remain named dependencies.

Ask our security team

For questionnaires, technical reviews or a specific use case, our team provides the appropriate level of detail.

Contact the security team