Data, privacy and compliance
This page brings together how Zentre AI handles your data: where it is processed, how personal data and confidential content are protected, and where to find the legal documents.
Where your data is processed
Zentre AI is hosted in the EU and is GDPR-compliant. Requests are routed within the EU.
Personal data in prompts
Administrators can turn on PII detection and masking for the organization. Zentre AI then replaces personal data with placeholders before the model sees a message and shows the original values again in the answer. If masking is on and a message cannot be masked, the message is not sent to the model. See Security for the details and settings.
Professional secrecy
For professions bound by secrecy under §203 StGB, §203 mode keeps chats, agents and Knowledge apart from normal work and offers only approved sovereign models. See §203 Professional Secrecy Mode.
AI interaction notice
As required by Article 50(1) of the EU AI Act, Zentre AI shows a notice that you are interacting with an AI system. It appears on the empty chat screen and under the prompt box, including in agent preview. See Chat.
Browser security
The chat and admin applications enforce a Content Security Policy and additional security headers. Session cookies always carry the Secure flag, so browsers send them only over encrypted connections.
Legal documents and DPA
The imprint, the privacy policy, the terms of service and the data processing agreement (DPA) are on the Zentre website. The Privacy page links to each of them.
Frequently asked questions
Does my data leave the EU?
Zentre AI is hosted in the EU, and requests are routed within the EU.
Related
Was this page helpful?