Security & compliance

Built for regulated organisations.

Your data stays in the EU cloud in Frankfurt or in your own data centre. Every answer is evidenced and logged. Nothing goes out without your approval.

Book a security call Legal documents

Deployment

You choose where c:node runs.

As your own tenant in the EU cloud in Frankfurt, entirely on your servers or with no internet connection at all. Agents, connectors and evidence stay the same.

Access

You approve what c:node may see.

Connectors work with the access you approve. API keys are bound to a profile and your tenant. Nothing reaches beyond your tenant.

AI safety

Only approved models – and every statement checked.

You decide which models see your data. Every statement is checked at its source. Anything that cannot be evidenced, c:node marks as open instead of asserting it.

Proof

Every answer lands in the audit trail.

Answer, sources, verification result and approval are logged, with a content hash. That way internal audit and regulators can verify them. Built for the logging obligations of the EU AI Act (Art. 12).

Human oversight

Nothing goes out without your approval.

Agents prepare – emails, official notices, CRM entries. Nothing is executed until you approve. That way, the decision stays with people.

Where does our data run – and who sees it?

A short summary for your tenant:

Security · overview

DeploymentEU cloud · Frankfurt

TenantYour own, separated

Check against sourceEvery answer

Audit trailActive

Outbound actionsOnly with approval

Training on your dataNo

Can we also run c:node completely without internet?

Yes. You have three deployment modes – agents, connectors and evidence stay the same:

Deployment · options

EU cloudYour own tenant in Frankfurt

Your data centreOn your servers, with your models

Air-gappedNo internet, open models

What do you have access to at our company?

Only what you have approved:

Access · your tenant

Microsoft 365OAuth · read only

Google WorkspaceOAuth · write with approval

Lexware OfficeAPI key · read only

Credentials are stored as a reference in your tenant's secret store.

Which AI models may see our data?

Only the ones you have approved – and I check every statement against its source:

Models · approved

Mistral Large 3approved

Claude Sonnet 5.5approved, EU region

Qwen · own serversapproved

GPT-6 Solnot approved

Show me today's audit trail.

Four entries, each with sources and content hash:

Audit trail · today

09:12Answer AML check · 5 sources

09:14Draft request for documents · pending

09:21Approved by M. Schulz

09:30Extract for internal audit

@Nora, prepare the notice for Ms K.

The notice is prepared – every statement names the provision and the evidence:

Draft · housing benefit notice Ms K.

Legal basis: WoGG § 3, § 4 · SGB I § 60

ApproveEditNothing goes out without approval

FAQ

Security, briefly explained.

Anything else? Write to us.

Where is our data stored?

In your own tenant in the EU cloud in Frankfurt or entirely in your data centre – without internet if you wish. You decide before launch.

Is our content used to train AI models?

No. Your content is not used to train models.

Which AI models may see our data?

Only the ones you allow: models from EU providers, large models via API in the EU region or open models on your own servers.

How does c:node prevent made-up answers?

Every statement is checked against its source. Anything that cannot be evidenced is marked as open – c:node then says which information is missing.

Can an agent send emails or change data on its own?

No. Agents prepare drafts. Nothing goes out until an authorised person approves it.

What does the EU AI Act mean for using c:node?

c:node is built for the requirements of the EU AI Act: traceable answers, logging (Art. 12) and human oversight. We clarify the classification of your specific use case together with you.

Do we get a data processing agreement?

Yes. You'll find the DPA under Art. 28 GDPR in the legal section; separate agreements apply to on-prem deployments.

Built for regulated organisations.

You choose where c:node runs.

You approve what c:node may see.

Only approved models – and every statement checked.

Every answer lands in the audit trail.

Nothing goes out without your approval.

All legal documents are in one place.

Privacy policy

Data processing (DPA)

AI transparency

Terms of use

Cookie policy

Imprint

We answer your security questions – before the first record.

Security, briefly explained.