Security
Your company data stays in the EU.
Verselo processes chats, documents and company knowledge in EU data centres and trains no AI on them. This page shows what runs where, who has access and the one point where data can leave the EU.
What runs where?
Every part of the platform has a fixed place. Web search is the exception.
| What | Where | Operator |
|---|---|---|
| AI models | EU-hosted models from leading providers; your data stays in the EU | List on request |
| Database and files: chats, documents, company knowledge | Frankfurt, EU | List on request |
| Application servers | Germany | Hetzner |
| Web search, only when a chat uses it | Only the search terms go to a search engine. Files, chats and company knowledge stay where they are. Admins can switch web search off. | Search engine |
Who can reach your data?
No training on your data
Verselo does not train models on customer data. EU-hosted models from leading providers; your data stays in the EU. Your admins decide how long chats are stored in the workspace.
Web search: the one exception
Web search sends only the search terms to a search engine. Switch it off for the whole workspace in the admin area.
Sign-in, SSO and SCIM
Sign in with an email code, Microsoft or Google. SAML SSO lets you use your company login only on Enterprise. On Enterprise, with SCIM, your identity provider creates and removes accounts automatically. SAML Single Logout is not supported.
Custom roles and groups
Admins assign the roles Admin, Editor and Member, or create custom roles with fine-grained permissions. Groups decide who sees which agents, prompts, knowledge folders and projects. Admins also set allowed models and budgets, and revoke access in one click.
Governance overview
One overview brings together access, approvals and usage for your compliance review.
Support only with your knowledge
Support access lasts only 30 minutes, with a notification to you and a log of every access.
Audit log and retention
The audit log is kept for 12 months. Your admins decide how long chats are stored: unlimited, 30, 90 or 365 days.
Export under GDPR Art. 20
Admins export the whole workspace as a ZIP, each person their own chats. You take your data with you if you leave, and you can answer access and portability requests.
DPA and subprocessors
You sign the data processing agreement with Verselo. The subprocessor list is available on request.
Help with AI Act Art. 4
Under AI Act Art. 4, companies must take measures to build their staff's AI literacy. The workshop with an attendance record and the overview of who uses AI in the workspace help you meet that duty. See the workshop →
How Verselo handles personal data on this website is set out in the privacy policy.
Limits
Some things Verselo leaves out on purpose, so nothing happens without your knowledge.
Emails only with approval
Verselo reads requests and drafts replies. Nothing is sent until a person approves it. The add-in never sends from Outlook, and appointments are only booked after confirmation.
Integrations are read-only
Each person connects their own Microsoft 365 or Google account, read-only and with the permissions they already have. Verselo gets no extra rights.
CRM only after confirmation
In the CRM there are three write actions, each only after confirmation: create a note, create a task, change a deal stage.
Meetings without a bot
No bot joins your meetings. You record from a browser tab, the microphone or an uploaded file, with the recording notice on by default. Transcription runs in the EU.
Security questions
Where does Verselo process our data?
In the EU. Verselo uses this infrastructure: EU-hosted models from leading providers; your data stays in the EU. Database and files are in Frankfurt, with application servers at Hetzner in Germany. Web search sends only the search term to a search engine. Files, chats and company knowledge stay in the EU. Admins can switch web search off. The subprocessor list is available on request.
Does Verselo train AI on our company data?
No. Verselo does not train models on customer data. Your documents and company knowledge serve as sources for your team's answers, with references to the original passages. Roles and groups control access. Your admins choose how long chats stay in the workspace: unlimited, 30, 90 or 365 days. This retention setting applies to the workspace, not to model training.
Does Verselo offer a data processing agreement?
Yes. Verselo provides a data processing agreement. The subprocessor list is available on request. The agreement and information about data locations, permissions and retention help your data protection team review the service. Your company must assess whether its specific use meets the applicable privacy requirements.
What privacy features does Verselo offer for businesses?
Verselo offers EU processing, no training on customer data and a DPA. Admins control groups, allowed models, budgets and retention. Custom roles are only available on Enterprise. SAML SSO and SCIM, only on Enterprise, manage sign-in and accounts; Single Logout is not supported. The audit log shows access and approvals. The governance overview is only available on Enterprise. These tools do not replace a privacy review of your specific use.
Questions from your data protection officer?
Review data locations, permissions and limits using the information on this page. We answer any open questions on a call, also directly with your data protection team.