Home/AGENTS HQ Platform/Security & Compliance
Built for heavily
regulated industries
We do not compromise on data sovereignty.
Data residency and sovereign hosting
Our platform is fully containerised (Kubernetes) and cloud-agnostic. For European clients requiring absolute data sovereignty, we deploy natively on SCALEWAY (France) or STACKIT (the Schwarz Group cloud), ensuring all data processing remains strictly within Germany. We also offer deployments via Microsoft Azure, AWS (Frankfurt / EU region) and Google Cloud Platform.
Strict tenant isolation
Every enterprise client operates within a dedicated, isolated workspace. Your data is never commingled, and your proprietary knowledge graph is never used to train public foundation models.
Zero data retention on APIs
When utilising commercial LLM APIs, we strictly enforce enterprise-tier, zero-data-retention agreements.
GDPR and sub-processors
We operate in full compliance with the GDPR. A comprehensive Data Processing Agreement (DPA) and our current sub-processor list are available on request during the procurement process.
What procurement usually asks for
- Hosting region and provider — answered above, including sovereign German options
- Tenant isolation model — dedicated workspace per client
- Model training on customer data — never
- DPA and sub-processor list — on request
Bring one bottleneck.
Leave with an agent.
Tell us about one real process in your operation. We come back with a concrete agent design and a cost model for running it.