Security & Sovereignty

Built where your data lives. Routed the way you choose.

Compliance documents are among the most sensitive things a company owns digitally. That is why EU data residency at Attestria is architecture, not an option.

EU residency

Sovereign by default.

Customer context stays on the EU processing path. Stored documents and audit history remain tenant-isolated in Europe.

Compute
Hetzner · Germany
Inference
Mistral · Paris
Fallback
IONOS · Germany
Data
Postgres, tenant-isolated

Model routing

You decide which model computes.

Keep inference entirely in the EU — or deliberately enable a different model per workspace.

EU Your documents Compute · Germany Data · Germany Inference · Paris US models Opt-in
Default

Mistral EU

Default route: inference in Paris, processing in Germany. No US model receives customer context.

Opt-in

US models (opt-in)

ChatGPT, Claude, Copilot or Gemini — only after an explicit per-tenant opt-in with matching contractual and retention controls.

Every external provider route requires an explicit opt-in per tenant. The default route stays entirely in the EU.

In practice

Security in daily operation.

Tenant isolation

Documents, answers and audit history are stored strictly separated per customer.

Audit trail

Every answer carries its source, confidence and approval status — traceable who decided what, and when.

Minimal website

This website loads no third-party scripts, no US fonts, no tracking. You can verify what we promise in your browser.

Encryption

TLS in transit; storage on encrypted volumes in German data centres.

Honestly: we are early — validation phase. Certifications like ISO 27001 for ourselves are on the roadmap, not on the shelf. We would rather show exactly where we stand than fake traction.

Next step

One real questionnaire. Your real documents.

Let’s talk for 20 minutes. We listen to how compliance runs at your company today — and whether Attestria can take over the repetitive part.