Kontrakte.AI Trust Center
Sensitive data requires particular care. That is why we place great emphasis on data protection and data security. Use the information in our Trust Center to learn how your data is handled.
Kontrakte.AI is designed so that your data and analyses
- are not used to train language models (LLMs)
- are stored in Germany and processed within the European Economic Area (EEA) with the language models set by default. If you choose a global model for a review, the provider processes the content outside the EEA and may store it there temporarily, for example to detect abuse
- are not accessible to other customers
Working in public administration? See how Kontrakte.AI supports public authorities in contract review: Kontrakte.AI for public authorities.
Compliance
under Art. 28 GDPR
for the hoster and staff
Measures
These are some of the measures we take to protect your data.
Infrastructure security
- ISO/IEC 27001:2022 certified hosting with Hetzner
- Separation of production and development systems
- Encrypted access
Organisational security
- System access controls
- Data access controls
- Controls for staff and subcontractors
Product security
- Role-based access control
- System analysis and monitoring
- Firewalls and separate networks
Personnel security
- Commitment to confidentiality and § 203 StGB (German Criminal Code)
- Clear role concept and responsibilities
- Clear contractual provisions
Resources
Use these resources relating to the Kontrakte.AI platform.
General terms and conditions (SaaS)
Kontrakte.AI system status
Report a security incident
Subprocessors
We work with these companies.
Hetzner Online GmbH
Cloud hosting provider in Germany (Nuremberg / Falkenstein)
Amazon Web Services (AWS)
Cloud provider for text recognition and language models
Microsoft Azure
Cloud provider for embeddings and language models
Google Cloud
Cloud provider for language models
Frequently asked questions on security and data protection
Does Kontrakte.AI use customer data to train AI models?
No. Kontrakte.AI does not use customer data to train large language models. Depending on your needs, you work in your own logically separated tenant or in your own dedicated instance, as used by public authorities and companies with particular requirements.
Where is the data hosted?
Your documents are stored in ISO/IEC 27001-certified data centres in Germany (Hetzner). For the AI analysis, you choose the language model per review yourself; provider and data zone are shown in the selection menu. Models in EU data centres are used by default. Whether you use a globally operated model is your decision. For the models provided via AWS and Google, the providers are additionally bound to professional secrecy under § 203 StGB (German Criminal Code). On request, your own models or models from selected hosters can also be used.
How does Kontrakte.AI handle personal data?
Consiliari Software GmbH processes your data as a processor under Art. 28 GDPR. A data processing agreement is standard. Hosting takes place in Germany (Hetzner). Your documents are not used to train language models.
How are security incidents reported?
Security incidents can be submitted at any time via the reporting form at /security/report. We respond within 24 hours.
Which encryption does Kontrakte.AI use?
Transport encryption via TLS 1.3 for all connections. Access to production data is restricted to a minimal team.