Your data stays in the EU.
KS-Agents is a European company building for European organisations. Our database, file storage, and a growing share of our AI inference run inside the EU under contracts that bind every sub-processor to the same standard.
Last reviewed: 2026-05-09
Database in EU
Hosted in the EU. Encrypted connections, encrypted backups, no replicas outside the EU.
File storage in EU
Object storage in EU regions. Application-layer encryption with a per-tenant key hierarchy for sensitive content.
AI in EU (where available)
Chat and realtime audio run through EU-resident inference paths. Per-app routing keeps EU customers on EU providers.
Where each layer of the stack runs
Inside the EU
- Application servers and database
- File / object storage
- Transactional email
- Chat and realtime audio AI inference (for EU-zone workspaces)
Outside the EU under SCCs
- Payment processing
- Non-EU AI providers (only for non-EU workspaces, opt-in)
For the complete list of sub-processors with provider names, locations and DPAs, see our sub-processors page.
How AI models handle your content
No training on your data
All LLM providers are bound contractually to Zero Data Retention and no model training on customer content. Verified programmatically at service boot for every routing gateway we use.
EU-only routing per app
Every workspace can be flagged EU-zone. The platform then automatically restricts its model selectors to providers and routes that keep inference inside the EU.
Bring Your Own Key
Customers who run their own AI accounts can plug their API keys directly into KS-Agents. Inference runs through your contract, your billing, your DPA.
Editable, not auto-published
AI-generated documents (interview summaries, knowledge extractions) are stored as drafts on your tenant. You decide when and how to share them.
Retention and deletion
Per-app retention policy
Set a default retention window for interviews and knowledge assets per workspace. A daily job auto-purges expired records.
Right to erasure (DSAR)
GDPR Art. 17 fulfilled via signed DSAR flow at [email protected]. Per-record deletion within statutory deadlines.
Subscription off-boarding
On subscription cancellation the workspace data is scheduled for permanent deletion 30 days later, with optional immediate purge on request.
Legal posture
GDPR Data Processing Agreement
Public, versioned, click-wrap accepted at signup. Available to download for your records.
Read the DPA →Sub-processors transparency
Every third party that processes customer data is publicly listed with location and DPA link. 30-day notice before adding a new one.
See sub-processors →For organisations with stricter requirements
If you operate in healthcare, public administration, banking or any sector with hard data-sovereignty constraints, we offer:
- Dedicated managed deployment in your Azure tenant or private VPC
- Customer-controlled encryption keys
- Custom DPA annexes (data residency lock, sub-processor restrictions)
- On-premise install on request — scoped per engagement
Write to [email protected] with your constraints — we will scope the deployment that fits.
Questions?
We answer compliance questions personally. Real humans, no ticket queues.
[email protected]