Convenience translation for information purposes only. The legally binding version is the German original. In case of any discrepancy, the German version prevails.
Non-binding product information. Rights and obligations arise exclusively from the individually concluded Enterprise contract. The Enterprise setup is agreed separately and is not part of the standard plans. Version: July 2026
For holders of professional secrets (lawyers, physicians, tax advisors, auditors and others) and other organizations with heightened requirements for confidentiality and protection against seizure. "Protected Secret Data" means the third-party secrets subject to the customer's professional duty of confidentiality (cf. the professional secrecy undertaking under Section 203 of the German Criminal Code (StGB), Annex 4 to the DPA).
German hosting of the AI inference. The models are operated in a German data centre – not in France. No storage, no training, no visibility of Inputs and Outputs. The specific provider is selected according to requirements (German hosting or confidential computing) and is bindingly designated in the Enterprise contract.
Section 203 StGB — professional secrecy. The sub-processor deployed contractually commits to protecting the Protected Secret Data, binds its staff under Section 203 (4) StGB, and passes this commitment down the processing chain. Together with the Provider's own undertaking (Annex 4 to the DPA), this creates a continuous contractual Section 203 chain.
Handling of seizure situations (Section 97 (2) of the German Code of Criminal Procedure (StPO)). The protection of data held by service providers against seizure is not conclusively settled in law. The Enterprise contract therefore contractually fixes the conduct: Protected Secret Data is not handed over voluntarily; objections are raised against seizures to the extent legally possible, and the customer is notified without undue delay to the extent legally permitted. Whether a seizure prohibition under Section 97 (2) StPO exists in an individual case depends on the circumstances and is not warranted.
Dedicated infrastructure as needed. On request, a dedicated server or a dedicated environment can be set up.
The specific provider and the exact scope of the Section 203 and seizure-related arrangements are bindingly determined in the Enterprise contract. Full protection exists only when exclusively the models designated for this purpose — hosted in Germany or confidentially — are used; optional models with worldwide processing are not deployed in this setup.
The Enterprise setup is configured individually and agreed in a separate contract. Please arrange a conversation via privatai.com/contact.