A private AI installation for your organisation

GDPRchat is normally a hosted service: prompts are processed by our European AI providers on EU infrastructure and conversations are stored in the EU. On-premise, we supply a physical installation — a self-contained unit with the AI models on it — and connect it to your network. From then on, GDPRchat and a private AI endpoint run locally on your own infrastructure, with no dependency on any outside service. Nothing leaves your network unless you explicitly allow it.

You decide what the installation is allowed to reach. Two common configurations:

• Fully isolated (air-gapped): the installation has no connection to the public internet. Every prompt, file and answer stays on your network.
• Controlled access: the installation is isolated except for specific external services you approve, such as web search, and nothing else.

In every configuration there is no analytics, no telemetry, and no training on your data.

Everyone in your organisation gets the full GDPRchat assistant — writing and editing, research, document analysis, code, data analysis, image generation, voice input, and the other built-in tools. It runs on the installation inside your network, rather than on public infrastructure.

The installation also exposes a private, OpenAI-compatible AI endpoint on your network. Any software that already speaks the OpenAI API can point at it instead, so your developers can build internal agents, automations, and agentic systems on GDPRchat's models without requests leaving your network. Many existing third-party AI tools and frameworks work with it as they are.

If you need the installation wired into your existing systems, or custom agents and workflows developed for your organisation, we do that work together with your IT and security teams as part of the engagement.

Some organisations cannot use a hosted AI service regardless of where it is located — because of internal policy, sector regulation, or the sensitivity of the data. A common concern is that providers subject to non-EU law, such as the US CLOUD Act, can be compelled to grant access to data wherever it is stored. An installation inside your own network removes this exposure: the data never leaves, so no external party can reach it.

These installations are typically used by organisations that cannot send data to a third party, including:

• Defence, government, and critical-infrastructure operators
• Banks, insurers, and other regulated financial institutions
• Hospitals and health-data processors
• Legal, research, and other strict data-residency environments

Pricing depends on the hardware, your security requirements, the number of users, the models you need, and any custom development. We install on-site or remotely across the EU, Norway, and Iceland, and send a proposal once we understand your requirements.