Verifiably secure. Evidence is what counts.
aiuno is built for organizations with the highest standards of data protection, compliance and process reliability – Legal, Finance, Pharma & Life Sciences. On this page you will find no promises, but architecture, service providers and contractual agreements you can verify.
The facts at a glance
Platform operation
qunaira UG, Germany – internal relationship with appoco GmbH contractually secured
Contracting party
appoco GmbH, Freising (aiuno brand)
Storage
exclusively Germany/EU · Hetzner, Falkenstein data center
AI inference
AKI.IO GmbH, Berlin-Mahlsdorf · alternatively Scaleway (EU), depending on configuration
Training
Customer content is not used for model training
Tenant separation
dedicated, persistent data room per client
Login
Two-factor authentication without exceptions
Third-country transfer
none in normal operation
Only the question and relevant excerpts leave your data room
On a query, it is not the document corpus that leaves the infrastructure, but only the question and the relevant text excerpts. No user content is stored permanently by the AI provider (Zero Data Retention). Answers come with source references at page level – verifiable against the original.
Built for professionals bound by professional secrecy – verifiable point by point
| Requirement | How aiuno meets it |
|---|---|
| Confidentiality (§ 43a BRAO) | Everyone involved in processing is bound to confidentiality; for professionals bound by professional secrecy, expressly with regard to professional secrecy under § 203 of the German Criminal Code (StGB). |
| Mitwirkende Person (§ 203 Abs. 3 StGB) | aiuno acts as a “participating person” and is expressly bound to confidentiality; the § 203 instruction is an annex to the confidentiality agreement. |
| Duration of the obligation | Contractual confidentiality for 3 years beyond the end of the contract; for professional and business secrets unlimited in time as long as protection exists. |
| Independent final review | aiuno is an analysis and support tool; every answer with source evidence at page level. Ultimate responsibility remains with the lawyer. |
| IT-Outsourcing (§ 43e Abs. 3 BRAO) | Data processing agreement with confidentiality and purpose-limitation clause, designed to meet the minimum content of § 43e (3) of the German Federal Lawyers’ Act (BRAO). |
| Standort (§ 43e Abs. 4 BRAO) | Hosting exclusively on servers in Germany; no transfer to the United States; no CLOUD Act access. |
| Keine Trainingsnutzung | Customer content does not flow into model training; the data remains the customer’s data. |
| Zero Data Retention | The AI provider does not store any content. |
| DSGVO/BDSG (§ 43e Abs. 8 BRAO) | Architecture aligned with the German Data Protection Conference (DSK) guidance; professional law for lawyers remains decisive. |
Dedicated infrastructure for professionals bound by professional secrecy: Anyone falling under § 203 StGB is hosted on a separate server infrastructure reserved exclusively for such professionals.
What is § 203 StGB – and what does it mean for firms outside Germany?
§ 203 StGB is a German criminal provision: lawyers and other professionals bound by professional secrecy commit a criminal offence if they unlawfully disclose a foreign secret entrusted to them. Even engaging external service providers is only permitted subject to conditions – the provider must be bound to confidentiality in text form as a “participating person” and instructed about criminal liability.
For firms outside Germany, § 203 StGB does not apply; instead, your country’s national duty of professional secrecy and the GDPR apply. Our approach: an architecture that satisfies the German standard is built on one of the strictest benchmarks in Europe. EU data sovereignty, no training use, source references and confidentiality-bound service providers benefit every client – regardless of where the firm is located.
What is technically secured
| Measure | Implementation |
|---|---|
| Transport | All external connections TLS 1.2 or higher; service-to-service traffic restricted via TLS and network policies. |
| Storage | Block-level encryption of all volumes (LUKS). |
| Identitäts- und Zugriffsmanagement | Self-hosted Zitadel; signed tokens with strict validation on every request. |
| Zwei-Faktor-Authentifizierung | Mandatory for all users, without exceptions. |
| Least-Privilege | Granular control by client, project or case file; administrative access controlled, audited, least-privileged. |
| Trennung | Tenants, case files and projects are isolated data rooms; client filter on every read operation. |
| Protokollierung | Access only by authorized personnel, fully traceable (audit trail). |
| Zugriffsmodell | Kundendatenzucess only for named individuals of the operating company qunaira UG – appoco GmbH as contracting party has no access; shareholders have no data access. |
| Secrets & Backups | Geschützte Storage mit Rotation; verschlüsselte, getrennt gelagerte Backups; regelmäßig getestete und dokumentierte Wiederherstellung. |
What aiuno does about AI risks
| Risk | Countermeasure |
|---|---|
| No training on customer data | Kundeninhalte fließen nicht ins Modelltraining. |
| Keine Langzeitspeicherung | No long-term storage of requests by the model provider. |
| Prompt-Injection-Schutz | Prompt-injection protection is part of the architecture. |
| Eingeschränkte Agenten | Agent tools and capabilities are restricted by design. |
| Kontrollierter Netzwerkverkehr | Outbound network traffic only to approved destinations. |
| Traceable answers | Quotes and sources – grounding in the source material instead of free invention. |
Who handles your data – by name
| Function | Service provider | Location | Contact with customer content |
|---|---|---|---|
| Hosting / Storage | Hetzner Online GmbH | Germany (Falkenstein) | Ja |
| AI inference | AKI.IO GmbH (default) or Scaleway S.A.S. – depending on configuration | Germany (Berlin-Mahlsdorf) or France (EU) | Yes – only the question and relevant excerpts |
| Platform operation | qunaira UG (limited liability company) | Germany | Ja |
| OCR processing | Tesseract OCR (open source) | Germany/EU | Ja |
No US or non-EU processors for user content. The complete, up-to-date sub-processor list is part of the data processing agreement and available on request. Sub-contractors are bound to equivalent data protection obligations – for professional-secrecy data additionally as participating persons under § 203 (3) StGB.
Two inference partners, one standard: Depending on the configuration, AKI.IO (DE) or Scaleway (FR/EU) is used – data processing and § 203 agreements exist with both. Neither stores user content permanently.
Operation, contracting party and access model: The contracting party is appoco GmbH (aiuno brand) – it has no access whatsoever to customer data. The platform is operated by qunaira UG: only there do named individuals have access to customer data and are bound to confidentiality. Both companies are independent entities based in Germany with their business address in Freising; they share one shareholder but are otherwise not cross-involved. The internal relationship is contractually secured – expressly also within the meaning of § 203 StGB. One shareholder of qunaira resides in Switzerland – they, too, have no access to any data.
Evidence – ready for review
| Document | Availability |
|---|---|
| Security factsheet | On request. |
| Sub-processor list | Publicly visible (table above) + full version on request. |
| Data processing agreement (DPA, Art. 28 GDPR) | On request – response within one business day. |
| Confidentiality agreement (NDA) incl. § 203 instruction | On request. |
| Technical and organizational measures (TOMs) | Summary on this page · full version on request. |
| BSI TR-03185 gap analysis | On request. |
| Attack simulation report | On request. |
| Model register | On request. |
| Extended security whitepaper (in-depth) | On request. |
Audited, not asserted
| Audit / certification | Status |
|---|---|
| BSI TR-03185 gap analysis | Conducted; report on request. |
| Angriffssimulation | Conducted; report on request. |
| ISO 27001 | aiuno aligns its security architecture with the ISO 27001 control requirements – currently aligned, not certified. Certification is targeted for 2027. |
| Betriebsmodi | European cloud (default), dedicated infrastructure, fully in your own data center or on company hardware – reviewed case by case (self-hosting). |
What happens if something happens – and afterwards
| Event | Procedure |
|---|---|
| Verletzungsmeldung | Immediately, at the latest within 48 hours of becoming aware, with the information required by Art. 33 (3) GDPR. |
| Rückgabe | All data in its original format within 14 business days of completion. |
| Löschung | All copies within 30 business days; confirmation on request. |
| Wiederherstellung | Restore tests are performed and documented regularly. |
| Kontrolle | Evidence and audits pursuant to Art. 28 (3) (h) GDPR – primarily via information, certificates, attestations; on-site audits after reasonable prior notice. |
Contact person
Contact personin für Datenschutz und Compliance: Antonella Lorenz (Geschäftsführung). Eine Bestellpflicht für eine Datenschutzbeauftragte bzw. einen Datenschutzbeauftragten besteht nach § 38 BDSG nicht (unter 20 ständig mit automatisierter Verarbeitung beschäftigte Personen).
Contracting party: appoco GmbH · Kammergasse 9, 85354 Freising · Handelsregister AG München, HRB 274462 · Marke „aiuno“
Platform operation: qunaira UG (limited liability company) · Freising
Frequently asked questions about security
For professionals bound by professional secrecy, aiuno is designed as a participating person under § 203 (3) StGB: separate server infrastructure exclusively for such professionals, confidentiality obligation with instruction, no third-country transfer. The DPA and the confidentiality agreement are provided on request.
§ 203 StGB is German professional-secrecy law. What is decisive for you is your country’s duty of confidentiality and the GDPR. The aiuno architecture is built on the German standard – commitment as a participating person, EU hosting, no training use – and is therefore also designed for the confidentiality requirements of other EU legal systems. We clarify the details with you case by case.
Ausschließlich in Germany bzw. der EU – Hetzner (Falkenstein) für Hosting, AKI.IO (Berlin-Mahlsdorf) für AI inference. Eine Verarbeitung außerhalb der EU/des EWR findet im Regelbetrieb nicht statt.
No. Customer content does not flow into model training and is not stored permanently by the model provider.
Only the question itself and relevant text excerpts. The document corpus remains in the dedicated data room.
Yes – the model-agnostic microservices architecture can be operated entirely in your own data center or on dedicated hardware. We review the scenario with you case by case.
Return in the original format within 14 business days, deletion of all copies within 30 business days – with confirmation on request.