kiimu
Security and compliance

Your data stays
where it belongs.

Your workspace is hosted at netcup in Vienna. Team access and data flows for AI requests are documented. Your agent runs locally for free or in a cloud sandbox with a paid plan.

GDPREU AI Act
Five commitments

Our foundation

01

Safeguards for your engagement

Permissions, support access and safeguards are documented for your workspace. The specifically agreed DPA measures govern; this is not a blanket certification promise.

02

Data flows for AI requests

The workspace is stored in Vienna. With kiimu AI credits, requests go through Melious or other documented providers, depending on the model. The contractual and privacy documents identify possible international data flows.

03

Agent on your computer or in the cloud

Your agent runs on your computer for free with your AI subscription. With a paid plan, it runs in a cloud sandbox. Your team shares chat, context, knowledge, and files in the hosted workspace.

04

No vendor lock-in

The service description governs agreed model access and changes. Customer data can be exported in documented formats; identical results from different models are not promised.

05

Support from Austria

From your first task through go-live and beyond, you have a point of contact who speaks English and German. We build the first use case together with you.

Architecture

How kiimu works

From the user interface
to the servers
User interface What the team sees
Agents AI agents for each role and team
Knowledge baseSkillsTasksImagesResearchDocumentsCode
Apps Tailored applications for a workflow only your business has
Security Who can do what
Integrations / MCP ERP, CRM and knowledge sources via MCP
Users and roles Teams, roles and access, for agents too
Costs and budgets Usage per team, visible before the invoice
Agent execution Free on your computer, paid in a cloud sandbox
Infrastructure Where it runs
Hosted workspace Workspace at netcup in Vienna
kiimu AI credits AI requests through documented providers
Data flows Sign-in and connected services are documented separately
Security and governance Underpins all three layers
Audit logGDPREU AI ActEU Hosting
Sandboxing

Separate workspaces for every team.

Your team shares chat, context, knowledge, and files in the hosted workspace. Existing hosted customer workspaces run in separate VMs. With a paid plan, the agent runs in a separate cloud sandbox.

01 Separate customer workspaces

Existing hosted customer workspaces run in their own VM per company.

02 Cloud sandbox for agents

With a paid plan, your agent runs in a cloud sandbox. It uses only the team context you share for the task.

03 Documented data processing

The contractual and privacy documents describe the providers involved and the data flows.

Deployment

Where your agent and data run.

Hosted workspace

We operate your workspace at netcup in Vienna. Data flows for AI requests, sign-in, and connected services are documented.

  • Workspace at netcup in Vienna
  • kiimu AI credits: documented providers
  • Other data flows documented in the relevant materials

Free on your computer

Your agent runs locally with your AI subscription. Your team shares chat, context, knowledge, and files in the hosted workspace.

  • Use your existing AI agent subscription
  • Agent runs locally
  • Share team context in the workspace

Paid cloud sandbox

Your agent runs in a cloud sandbox. For AI requests, use your subscription or AI credits from kiimu.

  • Shared team context
  • Agent runs in a cloud sandbox
  • Your subscription or kiimu AI credits
Governance

Every approval is documented.

Every approval is documented, so it is always clear who in the company is responsible. Permissions can be configured for each employee.

Quote for Hofer GmbH Approved by: Michael Berger, Managing Director
approved
March payment reminders Waiting for: Andrea Steinbacher, Authorized Signatory
waiting
Accounting inbox Inbox not assigned. Markus Lang (IT) can set it up in the workspace.
blocked
Documents

Everything your audit needs.

  • Data processing agreement on request
  • List of subprocessors on request
  • EU AI Act documentation on request
  • Deletion and retention policy on request
Request documents
Found a security vulnerability? hallo@kiimu.at Reply within one business day

Bring your IT questions. We have the answers.

Take 20 minutes with us, and your head of IT is welcome to join. Afterward, you’ll know where your data is stored and how we meet your security requirements.

Book a call