Fully in Germany
The Simple8 service and the KI- model are fully operated in an infrastructure operated by Simple8 in Germany.
Always know where your content is processed.
Simple8 runs entirely in Germany and is GDPR compliant. You get 99.9% availability, no external AI models, and your data is never used for training.
Our own AI. At home in Germany.
We run our own open-source models on our own hardware in data centers in Berlin and Nürnberg. The models are fine-tuned specifically for Plain Language and Easy Language.
We continuously improve our models. We never use customer data for training.
Operating in Germany and maintaining control over our models and hardware supports GDPR-compliant processing of your content.
Trust Summary
No external AI-model APIs
Automatic text processing.
Only necessary data
Simple8 only processes data necessary for account, query, result, security, billing or support.
Production availability
The production API includes a 99.9% monthly availability SLA.
How Simple8 processes your content.
Infrastructure location
The Simple8 service and its processing engine run in Simple8-operated infrastructure in Germany.
Processing engine
Simple8 uses a language-processing engine that is built, versioned, and operated as part of the Simple8 service.
Inference operation
Customer requests stay inside the Simple8 service and are not sent to an external model provider.
Training policy
Customer content is not used to train or fine-tune models.
How we protect your data.
| Data | Purpose | Storage duration | Your control | Deletion |
|---|---|---|---|---|
| Account details | Contract and access | Contract duration and statutory deadlines | Account management | After the end of the contract, insofar as no obligation exists |
| Query contents | Create result | During processing; background tasks at most one hour | Agreed retention plan | Upon completion or expiration, unless no cache is agreed upon |
| Results in cache | Provide unchanged content faster | Agreed cache period | Clear cache or export content | In case of deletion, expiration, or end of contract |
| Security protocols | Protect service and investigate incidents | Agreed security period | Support and Incident Process | After expiration, except in the case of a documented incident |
| Usage data | Quota and Billing | Billing period and statutory deadlines | Usage overview | After the expiration of the statutory period |
| Backups | Recovery after a failure | Agreed security cycle | Retention plan | Automatically with the next backup cycle |
Access and Encryption
TLS for data in transit
Examine how access is secured and permissions are granted. Multi-factor authentication, segregated roles, and traceable access logs should align with the intended use. For confidential content, it is important to know whether support staff have access by default or if access requires individual authorization. Encryption is valuable, but it does not address who is permitted to decrypt and edit content during day-to-day operations.
Encryption at rest
Encryption complements the location commitment but does not replace it. Keys can be managed in Germany while authorized personnel use them via an operations team in another country. Conversely, a global key management service can secure a German data region. Buyers should therefore know where keys are stored and managed, and which entities can authorize their use.
Role-based internal access
Many APIs require a secret access key. It indicates to the service which system is making a request and which permissions apply. This key should not appear in page content, screenshots, or browser code delivered to the public. If it were exposed, unauthorized parties could copy it and send requests on the company's behalf.
FAQ
Is content sent to an external AI provider?+
No.
Simple8 processes customer content entirely in Germany.
Is customer content used to train models?+
No.
This applies to all plans, languages, and language modes.
Learn more about processing and your controls in the Data Processing Terms.
Can we set a shorter retention period?+
Yes.
Production plans support documented retention controls, including shorter retention periods where workflow and operational requirements allow.
Can Simple8 be operated on premises?+
A full on-premise model deployment is not offered.
Enterprise architectures can keep selected cache or database components in the customer environment while the managed service and processing engine remain in Germany.