Everything IT, data protection and the works council will ask.
For the people who have to say yes before your company connects AI to its tools. Forward it to them.
What “EU only” covers.
Everything Vortner runs or brings in stays in the EU. The AI your people use is your own choice. Vortner makes sure it only gets what your rules allow.
One company, one server. Closed by default.
Each customer gets a separate server. Only the connection your AI uses is reachable from outside, and it needs a sign-in.
Your own server
Nothing shared with other customers: not the server, the database or the keys.
Your company login
Entra ID, Google or Okta. Close an account and its access ends.
Keys never reach the AI
Tool keys are encrypted with a separate key per company.
Rules enforced on the server
A cleverly worded prompt can’t talk its way past them.
Updates without surprises
In your maintenance window, tested on our server first, rolled back automatically if checks fail.
Backups every 15 minutes
Encrypted, plus a daily copy at a second EU provider that can’t be changed afterwards.
Who saw what, and how you can prove it.
Every request the AI makes is on record, with the rule that decided it. People appear as pseudonyms unless someone has a documented reason.
P-91C7Deals in HubSpotRule: Sales see their own accountsAllowedP-4E02Margins in DATEVNo rule allows thisStoppedP-91C7Absences in PersonioRule: Team leads see their teamAllowedP-B3A9Signed NDA in Google DriveRule: Legal sees all contractsAllowedEvery request on record
With the rule that allowed or stopped it. Any change to the record shows up when it’s checked.
Pseudonyms by default
Revealing a name needs a reason, and the reveal is recorded too.
Retention you decide
Entries are deleted when your period ends.
Data subject requests
Find and export what the AI touched about a person.
We don’t see your data
Support only looks when you grant time-limited access, and that’s on record.
Paperwork
DPA, technical and organisational measures and the subprocessor list on request.
AI that helps people, without watching them.
The council sees how teams use AI, with names hidden. The rules are sentences they can read and sign.
Sales can see deals of their own accounts.
Team leads can see absence dates of their team.
Finance can see open invoices of every team.
Rules as sentences
The council reads exactly what the system runs, and downloads it as a PDF to sign.
Wider access can wait
You decide which changes need the council’s approval. Limiting access always works right away.
A starting point
A sample works agreement to adapt, instead of a blank page.