Answers for IT, data protection and procurement
Hosted in Germany. In Enterprise, also in your own data centre.
Request the audit documentsYou decide where ValueSpoc runs
Application and language models run at IONOS in Germany by default, another model only if your organisation chooses one. A Helm package with an operations manual covers your own infrastructure.
Your data stays in your organisation
Every request is checked on the server against your organisation. The database also blocks direct access.
Secure sign-in
Two-factor sign-in is available in every plan and can be made mandatory. In Enterprise, sign-in runs through your identity service via OIDC, for example Keycloak.
Protected data, with AI too
Names of recorded people and organisations are replaced before transmission, contact details are masked. A person confirms every action that changes data. ValueSpoc keeps customer data out of any AI training.
Details
The agent works only with permission-checked tools on your organisation's data. The names of recorded people and organisations are replaced, e-mail addresses, phone numbers and IBANs are masked. For free text and documents, your administrators can block AI use altogether. AI output is labelled as such. For the assessment under the EU AI Act, the register of AI uses provides the details of each use.
Data protection in everyday work
You keep processing activities, data subject requests and deletion periods directly in the privacy module.
Details
Deletion routines and retention periods apply per organisation. A register shows, for each AI deployment, the processing activity and the state of the data protection impact assessment.
Every decision stays on record
A chained log shows every later change. Personal details can still be erased in line with data protection law.
Details
Governance decisions and security-relevant events are logged in a hash chain. If an entry is changed afterwards, or deleted once later entries follow it, the check shows where. Personal details can be erased without breaking the chain.
Data protection and operations
Standardised data protection documents
We provide the data processing agreement, technical and organisational measures per Art. 32 GDPR and a security concept, plus the platform details for your DPIA.
Data subject rights
Deletion by authorised staff or on request. Data categories can be released or blocked for AI use.
Data centre and releases
The IONOS data centre is certified to ISO 27001. Every release passes a vulnerability gate.
Data sovereignty
Your data and your operations stay in your hands.
Your data is yours
The core objects can be exported from the application at any time, in Enterprise also through the REST interface.
Running it yourself
In Enterprise, moving to your own infrastructure is possible by arrangement.
Source code escrow
By arrangement we deposit the source code with a trustee.
An open stack
The platform itself is built on open-source components. From Professional your organisation adds further language models itself when it needs them.