FAQ

I’m not sure my IT department can provide an API to our ERP system. Do you always need an API to our ERP / CRM system?

An API is the most powerful interface to interact with your ERP / CRM system.

If, for any reason, your IT department can’t provide no or only a limited API to your ERP / CRM, you can likely still use our AI Assistants. There are many alternatives available that work without an API, such as Electronic Data Interchange (EDI), automated data exports and imports, or other, file-exchange-based formats.

Book a free demo and our experts would be happy to explain to you how such a scenario could look like.

Can your solution be scaled as our business grows?

Yes, our solutions are fully scalable and can grow alongside your business. They can accommodate increasing volumes of tasks and expanding functionality as needed, ensuring that our AI assistants continue to meet your evolving needs.

Is any of my data stored? If so, where?

We prioritize data security and implement stringent measures to protect your data.

We offer two storage options for data that is generated by our software solution (e.g. process logs):

Using your own servers: If desired, the customer can set up a SQL database in their own environment and grant access to us. In this case, all data storage takes place at the customer's premises and only processing "in transit" takes place on our servers (when using our software solution). In this scenario, the customer is responsible for the maintenance, availability, and security of the database(s).
‍
Using our servers: In this case, we use AWS servers located in Frankfurt and Paris to store your data (e.g. process logs, model outputs, document cache) securely and redundantly. AWS complies with all required data protections, incl. GDPR, DIN/ISO/IEC 27001 and DIN/ISO/IEC 27018. Data at-rest and in-transit are protected using cryptographic libraries certified to approved standards, including 256 bit end-to-end encryption.

What happens to my data when it is analyzed by your model?

The Azure OpenAI Service is fully controlled by Microsoft; Microsoft hosts the OpenAI models in Microsoft’s Azure environment and the Service does NOT interact with any services operated by OpenAI (e.g. ChatGPT, or the OpenAI API).

All of your data (e.g. prompts (inputs), completions (outputs), embeddings, and your training data):

are NOT available to other customers.
are NOT available to OpenAI.
are NOT used to improve OpenAI models.
are NOT used to improve any Microsoft or 3rd party products or services.

What IT security certifications does your solution have?

The data centers we are using for the models (Microsoft Azure Europe) as well as for our web applications (AWS Germany / France) are certified in accordance with DIN/ISO/IEC 27001 (incl. Germany C5) and DIN/ISO/IEC 27018.

Who has access to my data?

Data resulting from using our automation software is never stored anywhere else than on your own system infrastructure or, if you prefer, on our cloud servers (see question "Is any of my data stored? If so, where?”). All databases used for client projects are separated from each other. Of course, none of our other clients can get access to any other client's data (e.g., process logs, prompts, responses) and internal access is on a strict need-to-use basis.

How do you ensure compliance with data protection regulations?

We are aware that we are dealing with sensitive data. This is why we adhere to all relevant data protection regulations of GDPR, ensuring that our processes and systems are fully compliant with these standards. Our hosting partners (AWS Germany and France for our app servers, Microsoft Azure Europe for our AI models) comply with GDPR, DIN/ISO/IEC 27001 and DIN/ISO/IEC 27018. Our standard Data Protection Agreement, including our Technical and Organisational Measures is available on request.

What hosting provider do you use for your models?

We mostly use Microsoft Azure Europe with servers in Switzerland and Sweden to host our models, who comply with GDPR, DIN/ISO/IEC 27001 (incl. Germany C5) and DIN/ISO/IEC 27018. We might use other model providers for specific use cases or custom-trained models, however only if compliant with GDPR requirements.

Do you use my data to train AI models?

In general, we do not use any of your data to train AI models used in our core solutions. There might be edge use cases, for which a custom-trained model might perform better. In those cases, we can deploy a custom model exclusively for and with the expressive consent of the customer. Such models will not be used for any other customers.