Trust
Compliance & EU
GDPR, AI Act, EU jurisdiction, DPIA, DPA, model licensing.
§ 01
EU-jurisdiktion
- All processing sker på H200-kluster i Stockholm (6G AI Sweden, atNorth-datacenter).
- Inga tredjelandsöverföringar — varken till USA, UK eller andra jurisdiktioner utan adequacy decision.
- Sub-processors (Mollie, Proton Mail) är samtliga EU-baserade.
§ 02
Model licensing
We use open-weight models with commercially permissive licenses:
- BGE-M3 + BGE-reranker-v2-m3 (BAAI) — MIT
- GLiNER (gliner-multi-pii) — Apache 2.0
§ 03
Compliance
- Text is never persisted — temp files in RAM (/dev/shm), deleted immediately after processing.
- DPIA, DPA templates (private + public sector) and breach-notification pipeline available on request via privacy@grunden.ai.