Your data stays in Germany
All customer data resides on German infrastructure.
ISO 27001
Stage 1 & 2 audits complete, certificate expected within weeks. Penetration test passed.
No training, ever
Your data never trains AI models. Contractually guaranteed
Encrypted end to end
TLS 1.3 in transit, AES-256 at rest.
Sovereign by default
Qwen runs on STACKIT (Schwarz Group) and Kimi on DeepMask’s own infrastructure. All remaining models are processed within the EU.
Deleted when you say so
Removed from active systems immediately, purged from backups within 30 days.
Two levels of sovereignty.
You choose which one you need.
Every model on DeepMask is processed on European infrastructure, and your data is stored in Germany. But “European” is not one thing - so we tell you exactly what runs where, and let you decide how far you need to go.
Always, on both levels
Exactly where we stand
Documents for your data protection officer
The data processing agreement, our technical and organisational measures, the sub-processor register and our security documentation are all kept in the Trust Center. No form, no NDA, no sales call.
open your document library
For professions bound to confidentiality we stand
Law firms, patent attorneys, medical practices and tax advisors work with data under special legal protection. DeepMask is built to support those obligations: German hosting, contractual no-training guarantees, granular workspace controls, and agreements in writing.
DeepMask provides a truly secure environment, so we can leverage AI confidently across our entire workflow.
Maximilian J. Weiss
Partner, SKM-IP
