EorvoYour possibilities. Further.Explore Eorvo
Data sovereignty
Use AI with a clear understanding of where your business information goes and how it is used. We design your websites, connected systems and agents around the access, hosting and privacy requirements you choose.
What control means in practice
Choose the setup that fits
The right choice depends on the information involved, the quality you need and the cost of running the system. We compare the options before building.
Run a suitable model on your own servers or machines. A useful option when sensitive information must stay within an environment you control.
What we checkPlan hardware, updates, backups and support. Check any external connections separately.
Use a cloud environment configured for your organisation. Choose the region, access rules and who operates each part of the system.
What we checkConfirm the actual countries, administrator access and responsibilities in the provider terms.
Send the information a task needs to a selected AI service. Choose the service and account settings to match your data requirements.
What we checkCheck processing locations, retention, model-training use and any other providers involved.
A project can combine these options. For example, internal document search could run privately while an approved hosted model handles public marketing copy. The routing rules are part of the design.
Example design / internal document assistant
An employee asks a question about company documents. Here is how we would design the controls around that task.
The system identifies the person and their access permissions.
It searches only the documents that person is allowed to use.
Only the relevant information goes to the approved model, under the agreed settings.
The answer links to its sources. A person checks important decisions and uncertain results.
Before release, we test restricted-document access and incorrect or misleading inputs. Actions such as sending a message, changing a record or approving a payment need their own permissions and review rules.
What your project includes
The proposal identifies the controls and documents included in your project. When your project handles sensitive information, these are the four things we plan with you.
The sources, systems and providers involved, with the locations and uses of each data copy.
User, administrator, agent and support permissions, plus the actions that need approval.
Retention periods, deletion, backups, data export and the process for ending a service.
Evidence of the agreed checks, operating instructions and who handles changes or incidents.
EU hosting and GDPR
If your project requires EU-only storage and processing, we document the countries and providers for the whole workflow, including logs, backups and support access.
GDPR also covers why personal data is used, how much is needed, people’s rights and the responsibilities of each organisation. We prepare the technical information for review with your data protection lead or legal adviser.
Read the EDPB’s guidance on data protection by design and international transfers.
Common questions
Further reading: EDPB guidance on protecting personal data · CNIL guidance on deploying generative AI (French).
Your customer information, internal documents or a personal project. We’ll help you choose a practical first step.