Where is the data hosted?

The assistant is operated in Germany; the answers are generated by a specialised model provider, also outside the EU on the basis of standard contractual clauses. This is advantageous from a data protection perspective and ensures short paths for questions about operation. Your content and conversation data remain in your access; you are not pushed into a closed system.

For companies with particularly high requirements, European or self-hosted language models are possible as a separate project by arrangement; they are not included in standard operation. You can find details on the privacy and hosting page.

Storage is sparing: one row per conversation and one row per message, there is no separate visitor table. The IP address is not held in plain text but as a checksum with a fixed addition, shortened beforehand for IPv6. A required consent is attached to the conversation and not to a value in the browser, because that can disappear there; the storage of the visited page holds three entries with an expiry and not a single message, plus, only for a form on another page, a handoff in session storage that is valid for two minutes and disappears on first read.

Tenant separation is enforced in every database query, not in the individual controller: a signed-in account without a tenant receives an empty set instead of the whole inventory, and the account status is checked on every request, not only at sign-in. If we access your account for support, that runs through a separate session with a log entry which expires after four hours, without your password and without bypassing your second factor. What is stored where and for how long is stated on the privacy page.