AI.tune is built for data sovereignty – the strongest argument against US platforms. Certified, hosted in Germany, and on request fully within your own infrastructure.
Your data stays in German data centres – not with US providers.
Data protection under European law, from architecture to operations.
Fully operable within your own infrastructure on request.
Certified information security management system (MSECB, certificate no. CERT-001825, valid until 28 May 2029).
View certificate (PDF)Processing under European data protection law – from architecture to operations.
Research and development funding from the German Federal Ministry – an independent quality and innovation signal.
Your content stays in the platform and is not used to train third-party models. AI.tune orchestrates the right model for each task.
Operated in German data centres – relevant for regulated industries and public-sector clients.
Fully operable within your own infrastructure on request – maximum control for sensitive data.
Transmission to the current state of the art (SSL/TLS over HTTPS). This site uses local fonts and no tracking cookies.
Connect via SSO/SAML to your identity management – e.g. Microsoft Entra ID / Active Directory.
Open interfaces for ERP, CRM and custom connections; existing Make, Zapier and n8n workflows via webhook. More on integrations.
Defined availability (99.9 % for private cloud) and a status page for monitoring.
Everything procurement, IT and data protection need for a review, in one place. Public or on request.
Art. 28 GDPR agreements with all; EU SCCs and transfer impact assessments for third-country transfers. As of May 2026.
| Provider | Purpose | Data location | Legal basis |
|---|---|---|---|
| OpenAI Ireland Ltd. | AI models (LLM) | USA / EU | EU SCC |
| Anthropic PBC | AI models (LLM) | USA | EU SCC |
| Google Cloud EMEA Ltd. | AI models (LLM) | USA / EU | Data Privacy Framework |
| Hetzner Online GmbH | Servers, databases, storage | Germany / EU | Art. 28 GDPR (EU/EEA) |
| Google LLC | Workspace, email | USA / EU | EU SCC |
| Development partners (EU) | Development & operations | EU | Art. 28 GDPR |
Contractual guarantee from all AI providers: no use of customer data for model training. Full list incl. addresses on request. Changes are announced at least 30 days in advance per the DPA.
ISO certificate, DPA, sub-processors, privacy policy. Freely available, no request needed.
Full TOMs documentation, certificate details, eligibility evidence for tenders. By email, informal.
Penetration test report and further internal audit reports. After a short confidentiality agreement.
For tenders we support eligibility and security evidence.
We discuss your hosting, certification and operations requirements in person – including evidence and on-prem options.
Book a demo