A private AI installation for your organisation

GDPRchat is normally a hosted service: prompts are processed by our European AI providers on EU infrastructure and conversations are stored in the EU. This is different. We supply a physical installation — a self-contained unit with the AI models on it — and connect it to your network. From then on, GDPRchat and a private AI endpoint run locally on your own infrastructure, with no dependency on any outside service. Nothing leaves your network unless you explicitly allow it.

You decide exactly what the installation is allowed to reach. There are two common configurations:

• Fully isolated (air-gapped): the installation has no connection to the public internet. Every prompt, file and answer stays on your network.
• Controlled access: the installation is isolated except for specific external services you approve — for example web search — and nothing else.

In every configuration there is no analytics, no telemetry, and no training on your data.

Everyone in your organisation gets the full GDPRchat assistant — writing and editing, research, document analysis, code, data analysis, image generation, voice input, and the other built-in tools. The only difference is where it runs: on the installation inside your network, rather than on public infrastructure.

The installation also exposes a private, OpenAI-compatible AI endpoint on your network. Any software that already speaks the OpenAI API can point at it instead — so your developers can build internal agents, automations, and agentic systems on GDPRchat's models without a single request leaving your network. Many existing third-party AI tools and frameworks work with it as they are, now running entirely inside your own secured environment.

We also do the build. If you need the installation wired into your existing systems, or custom agents and workflows developed for your organisation, we do that work together with your IT and security teams as part of the engagement.

Some organisations cannot use a hosted AI service regardless of where it is located — because of internal policy, sector regulation, or the sensitivity of the data. A common concern is that providers subject to non-EU law, such as the US CLOUD Act, can be compelled to grant access to data wherever it is stored. An installation inside your own network removes this exposure: the data never leaves, so no external party can reach it — and you can still build everything you need on top of it.

These installations are typically used by organisations that cannot send data to a third party, including:

• Defence, government, and critical-infrastructure operators
• Banks, insurers, and other regulated financial institutions
• Hospitals and health-data processors
• Legal, research, and other strict data-residency environments

Pricing depends on the hardware, your security requirements, the number of users, the models you need, and any custom development. We install on-site or remotely across the EU, Norway, and Iceland, and return a concrete proposal once we understand your requirements.