DentroChat's Trust Center
DentroChat is an AI application built and run entirely in Europe. This page covers where chats, files, and other forms of data are processed, who handles them, and which documents an organisation can review.
Compliance
- GDPROperated under GDPR by DentroInnovation OÜ in Estonia.
- EU and SwitzerlandAll data and infrastructure in the EU or in Switzerland.
- EncryptedTLS 1.3 in transit, encryption at rest, separate encrypted backups.
- No trainingChats and files are not used to train AI models.
Resources
View allControls
View all- No training on customer content
- Providers do not retain prompts for training
- Chats can be deleted in the product
- GDPR applies
- Article 28 agreement for organisations
- Subprocessors in the EU or Switzerland
Subprocessors
View all- Germany
Hetzner Online GmbH
Server hosting, data storage, backup infrastructure
- France
Scaleway SAS
Encrypted backup storage, server log storage
- Austria
Cortecs GmbH
AI routing and inference gateway
- Switzerland
Infomaniak SA
AI language model inference
FAQ
View allResources
Agreements and reports on how DentroChat processes personal data.
- Download
Data processing agreement
Agreement under Article 28 for an organisation, including the technical and organisational measures.
- Download
Subprocessor list
The companies that process data for DentroChat, what each one does, and its country.
Web page - Download
Data flow
How data moves from the browser to storage in Germany, on to inference, and to the backups in Germany and France.
- Download
Security overview
How the service is hosted and encrypted, how long data is kept, who can reach production, and that chats and files are not used to train models.
- Upon request
Professional secrecy
For lawyers, tax advisors, auditors, and doctors, including confidentiality under § 203 of the German Criminal Code.
- Upon request
DORA addendum
For a bank, insurer, or other financial firm that has to manage DentroChat as an IT provider under DORA.
- Upon request
DPIA information
What an organisation needs from us to write its own data protection impact assessment.
- Upon request
Security questionnaire
A completed CAIQ or SIG Lite for a security review of DentroChat.
Controls
The measures in our privacy policy, grouped the way a review reads them.
Infrastructure
Data transmission encrypted
Traffic between your browser and DentroChat uses TLS 1.3.
Data encrypted at rest
Chats and files are encrypted on the servers in Germany.
Backups stored separately
Encrypted backups are kept in Germany and France, apart from the primary data.
Application hosted in Germany
The application, accounts, and files run on Hetzner in Germany.
Product
No training on customer content
We do not use conversations to train AI models, and we do not sell data.
Providers do not retain prompts for training
A provider receives a message to generate the reply and does not keep it for training.
Chats can be deleted in the product
You delete a conversation in the app. Uploaded files and generated images stay until you delete them or close the account.
Account data deleted after closure
Account data is deleted within 30 days of account closure.
Data and privacy
GDPR applies
DentroInnovation OÜ is registered in Estonia, an EU member state.
Article 28 agreement for organisations
An organisation can request a data processing agreement under Article 28.
Subprocessors in the EU or Switzerland
Switzerland has an EU adequacy decision. The published list has no company outside those places.
Export and other rights by email
Account closure, export, and other GDPR rights go through hello@dentro.chat.
Organisation
Production access limited
Access to production systems is limited to people who need it.
Passwords hashed
Passwords are stored as hashes.
Security updates and monitoring
We apply security updates and monitor the service.
Invoices kept for 7 years
Payment records are kept for 7 years under Estonian tax law. Server logs are kept temporarily for debugging.
Subprocessors
Open the full listCompanies we contract with, and the inference providers Cortecs engages for us. Analytics, sign-in, and deployment run on our own servers at Hetzner in Germany.
Companies we contract with
- Hetzner Online GmbHGermany
Server hosting, data storage, backup infrastructure
- Scaleway SASFrance
Encrypted backup storage, server log storage
- Cortecs GmbHAustria
AI routing and inference gateway
- Infomaniak SASwitzerland
AI language model inference
- Black Forest Labs GmbHGermany
AI image generation
- Mistral AI SASFrance
Spoken responses
- Linkup TechnologiesFrance
Web search and page retrieval
Video transcripts from public links
- Lettermint B.V.Netherlands
Transactional, marketing, and support email
- Migadu-Mail GmbHSwitzerland
Business email hosting
- Mollie B.V.Netherlands
Card payments and SEPA direct debit
- Phare (Lightkeeper OÜ)Estonia
Uptime monitoring
Inference providers engaged by Cortecs
- AKI.IOGermany
Language model inference and image generation
- Arkane Cloud (ARKANE)France
Language model inference
- Berget AISweden
Language model inference
- EntrimSlovenia
Language model inference
- Inceptron ABSweden
Language model inference
- Infercom SCSLuxembourg
Language model inference
- IONOS SEGermany
Language model inference
- OVHcloudFrance
Language model inference
- Scaleway SASFrance
Language model inference
- Tensorix Ltd.Ireland
Language model inference
FAQ
Where is DentroChat hosted?
On Hetzner in Germany. The application, accounts, and files are there.
Other companies that handle data, and the country of each one, are on the subprocessors page.
Are chats used to train AI models?
No. We do not use your chats or files to train AI models. A provider gets the message to write the reply and does not keep it for training.
How does DentroChat meet the GDPR?
DentroInnovation OÜ in Estonia is the controller. Processing takes place in the EU or in Switzerland.
You can delete chats and files in the app. To close your account, export your data, or use another right, email hello@dentro.chat. You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or to the authority where you live.
Does my data leave Europe?
No. The application and the infrastructure run in the EU or in Switzerland. No company on the subprocessor list is in the US. Switzerland is outside the EU and has an adequacy decision.
Who else processes the data?
The subprocessors page lists the companies we contract with, and the inference providers Cortecs engages for us. We update the page when a company is added or removed. If a provider engages further companies, that provider discloses them.
Services we run ourselves stay on our own servers. If we add a subprocessor that materially changes how your data is processed, we email you at least 30 days ahead. You can object or end the subscription.
Can an organisation use it with client or patient files?
That depends on the rules of your profession. An organisation can request a data processing agreement under Article 28. For lawyers, tax advisors, auditors, and doctors we work out the extra duties with you, including confidentiality under § 203 of the German Criminal Code.
How long do you keep chats and files?
Chats, uploaded files, and generated images stay until you delete them or close your account. Earlier versions of a file DentroChat has edited stay for 30 days. Account data is deleted within 30 days of closure. Invoices and payment records are kept for 7 years under Estonian tax law.
You delete chats and files in the app. Account closure and export go through hello@dentro.chat.
How do we get a data processing agreement?
Email hello@dentro.chat from your organisation and we will send the Article 28 agreement.