Security & Data Handling
Deploy in your private cloud, retain 100% data ownership, and stay compliant with GDPR and the EU AI Act.
Last Updated: October 2026
At TheGenAI, enterprise security, code confidentiality, and regulatory compliance are built into our architecture from day one. Here is exactly how we handle your infrastructure, models, and data.
1. Private VPC & On-Premise Deployment
All custom AI solutions, prototypes, and agentic workflows can be deployed entirely within your own cloud perimeter (AWS, Microsoft Azure, Google Cloud Platform) or self-hosted in air-gapped on-premise environments. No client code, proprietary business logic, or customer data ever leaves your controlled security perimeter.
2. Zero Data Retention & No Training on Client Data
We enforce strict Zero Data Retention (ZDR) policies across all AI APIs and foundation model providers. Your proprietary codebases, architecture diagrams, internal APIs, and operational data are strictly processed ephemerally for runtime inference and are never stored or used to train public or proprietary models.
3. GDPR & EU AI Act-Aware Architecture
As an Amsterdam-based studio, we build systems with privacy-by-design under the GDPR and align with the European AI Act framework. We implement strict data minimization, human-in-the-loop governance for agentic workflows, audit logging, and team AI-literacy best practices.
4. 100% Code & IP Ownership
Clients retain complete, unencumbered ownership of all deliverables, repositories, architecture maps, and custom code created during our engagements. We build on open, standardized technologies to guarantee zero vendor lock-in.
5. Subprocessors List Available on request
We maintain a minimal footprint of verified infrastructure subprocessors. A comprehensive list of third-party sub-processors with geographic hosting regions is available upon request.
6. Data Processing Agreement (DPA) Standard contract
We provide standard, GDPR-compliant Data Processing Agreements (DPA) incorporating standard contractual clauses for all enterprise and pilot engagements.
7. Insurance & Liability Insured
TheGenAI carries professional indemnity and cyber liability insurance tailored for software engineering and enterprise advisory services.
8. Certifications & Standards ISO 27001 aligned
Our engineering practices adhere to ISO/IEC 27001 information security controls and OWASP Top 10 for LLMs security guidelines.
Need a Custom Security Review or DPA?
Have an enterprise vendor security questionnaire, custom compliance requirements, or need a signed Data Processing Agreement before our pilot? We are happy to help.
Contact Security Team