Data protection and the responsible handling of customer data are core principles of everything we build. Pseudonymised processing, the model of your choice, and hosting in Germany.
Data protection and the responsible handling of customer data are central guidelines for how we develop EIS, QCC and every other Quatelio product — and how we work in your systems as consultants.
Personal data is pseudonymised before any AI processing. The language model only sees anonymous records — it cannot trace them back to real people.
You decide which language model runs: one we provide, or your own model from the provider of your choice — to fit your IT compliance rules.
Our services run in ISO/IEC 27001 certified data centres in Germany, in line with the GDPR and the EU AI Act.
Every request from EIS or QCC passes the same path. Your SAP® authorisations apply, personal data is pseudonymised, and every step is written to the audit log.
Managed by us, hosted in Germany.
Runs in your own SAP® BTP account on Kyma.
Runs in your data centre, next to your SAP® system.
TLS in transit, encryption at rest. SAP® credentials and keys are kept apart from application data.
Users only see what their SAP® roles allow. We never work around your authorisation concept.
Analytics and assessments only read. Write access exists only where a product needs it.
Every change QCC proposes is shown as a diff and applied only after a person approves it.
Every question, data access and change is logged — who, what, when and why.
Login via your identity provider (SAML or OpenID Connect) with role-based access.
Your data is never shared with other customers and never mixed into another tenant.
Data is deleted when you end the contract or ask us to — documented in the AVV.
No. Every customer runs in a separate tenant. Your data, prompts and results are never shared with or visible to other customers.
No. Personal data is pseudonymised before it reaches a model. The model works with anonymous records and cannot trace them back to real people; names are put back only inside your tenant.
No. Your data is never used to train our models or any provider's models — and our products do not need training on your data to work.
Yes. EIS and QCC can run in your own data centre or your SAP® BTP account, with a local or your own language model.
Yes — an AVV according to Art. 28 GDPR, together with our technical and organisational measures (TOMs).
We document how our AI features work, keep a person in the loop for every change, and give you the information you need for your own AI Act duties.
Request our TOMs, data processing agreement and architecture overview — or talk to us about your requirements.