Your data stays yours.

Operated in Germany. Processed only in the EU. Never used for training. Sovereign, independent of any single model provider and transparent at every level.

Where your data is stored. And where the models run.

BerlinSovereign models
FalkensteinYour data · Hetzner
Helsinki, FinlandBackups
Operations: Germany
Backups: Finland
Sovereign models: EU
Other models: EU

Evidence. Audited and documented.

GDPR

Data processing under Art. 28 GDPR, with a data processing agreement (DPA).

Swiss FADP

The revised Federal Act on Data Protection (nFADP) is covered in the DPA and in our compliance register.

EU AI Act

MAIA is neither prohibited nor high-risk. The transparency obligation is met.

ISO/IEC 27001

Our ISMS under ISO/IEC 27001 is in place and internally audited; the certification audit is under way.

No training

Contractually excluded, with every provider.

The path your data takes. From question to answer.

  1. 1

    You ask

    Your question is sent to MAIA in encrypted form.

  2. 2

    MAIA searches

    In your data in Germany, only with your permissions.

    Germany
  3. 3

    A model computes

    In the EU. On request, EU-sovereign with aki.io, a German provider. The provider stores nothing and does not train on your data.

    EU · optionally EU-sovereign
  4. 4

    You get the answer

    With sources. It is stored only on your side.

    Germany

You stay in control. At every step.

Same permissions as the source system

What you can’t see in SharePoint, you won’t see in MAIA either.

Incognito chats

No memory, nothing is carried over.

Usage at a glance

Statistics per department, without content.

Two colleagues going through documents together at a laptop

We do the security check with your IT team.

DPA, permissions, approvals and your questionnaire: we work through them together before the first team starts.

More about the kick-off

What customers ask us

Anything else on your mind? Book an intro call. We’re happy to answer your questions in person.

Where is our data stored?
Operations at Hetzner in Falkenstein (Germany), backups in Helsinki (Finland). Everything stays in the EU, including the AI processing.
Do you train models on our data?
No. This is contractually excluded with every provider.
Is MAIA ISO 27001 certified?
Our ISMS under ISO/IEC 27001 is in place and internally audited; the certification audit is under way.
Who are your sub-processors, and how do we find out about changes?
The list is in Annex 1 of the DPA. We announce changes at least 14 days in advance, and you can object within 14 days.
Does MAIA see more than our users are allowed to see in SharePoint or Confluence?
No. Access is read-only. You grant it and can revoke it at any time.

Questions about security? Talk to us.

In a first intro call, we’ll work out together what a good start with MAIA looks like for you.

Book an intro call

Cookie settings

We store your choice for 12 months.

Necessary

Security, forms and storing your choice.

Always on

Marketing

Measures whether our Google ads lead to enquiries. Google Tag Manager, Google Ads. No remarketing.

privacy policy