News
Why hablo · Your data, in Europe

Private AI: your data, in Europe

Your agents and their files live on servers in the European Union, each one in its own isolated space. On the Professional plan we sign the GDPR data processing agreement and you get European AI models that don't store your data or use it for training.

Servers in Finland and GermanyProcessing agreement (GDPR art. 28)European models with zero retentionEvery agent, isolated
Where your data lives European Union
hablo infrastructure
LocationWhat's there
HelsinkiFinlandAgents and servicesEU
NurembergGermanyAgentsEU
FalkensteinGermanyImmutable backupEU
ParisFranceModels (EU)EU
Illustrative example
What happens to your data

Where it is, who sees it and how long it is kept

1

Where it lives

All the infrastructure is in the EU: Helsinki (Finland), Nuremberg and Falkenstein (Germany). The provider is Hetzner.

2

Who sees it

Nobody accesses your content except to provide the service or to resolve an issue you ask us about.

3

What we keep

For billing we keep metadata — model, tokens, cost — never the text of your conversations.

4

For how long

Your data, for as long as your agent exists. Daily backups expire in 56 days at most, and the immutable backup in 7.

Personal or Professional

Who is responsible for what, depending on your plan

Personal plan

For your own personal use

  • We are the data controller only for your account data
  • What you process with your agent is your responsibility
  • No data processing agreement
  • Standard models
Professional plan

For customer data

  • We are your data processor (GDPR art. 28)
  • Processing agreement and list of sub-processors included
  • Full catalogue, including the European (EU) models
  • We tell you before we change sub-processor
If you process data about customers, employees or suppliers: Professional.
The AI models

Which model to use, depending on the data you give it

The European models carry the (EU) tag in their name. You choose which models each agent uses from your account area.

ModelsWhere they processWhat they guaranteeUse them for
European (EU)
MistralEU and EEAProcessing agreement, zero retention and training switched offEverything, including personal data
ScalewayParis (France)Doesn't keep requests or responses and doesn't train on themEverything, including personal data
Non-European
OpenAI, Anthropic, Google, xAI and othersUnited States and other countriesThe most capable models on the marketCoding, analysis, research or content, with no personal data
Experimental
Qwen freeGermany and FinlandNo processing agreementTesting with no personal data

Professional plan rule: when a task involves personal data of people living in the EU, the models tagged (EU) are used. Details in the data protection information.

Security

How we protect it

Isolation

Every agent in its own space

Each agent runs in its own container, with separate storage.

Encryption

Encrypted communications

Connections to the model providers are encrypted with TLS.

Backups

Backups against ransomware

Verified daily backups and a separate immutable backup.

Access

Your permissions, your rules

Every connection — email, Drive, Notion — with read or write access, and you remove it whenever you like.

Control

Change log

Configuration changes leave an audit trail.

Good practice

Privacy isn't about nice phrases: it's about judgement

What causes trouble

Connecting everything at once, giving write access to everything and pasting passwords into the chat.

What gives you peace of mind

Minimum permissions, start with read-only, remove what you don't use and use the (EU) models when personal data is involved.

Privacy isn't doing nothing. It's connecting what you need, with just the right permissions.

Before you decide

What people ask about privacy and the GDPR

What is a private AI?
An AI that works with your data without exposing it: with hablo, your agents live on EU servers, each one isolated, and for personal data you use European models that don't store what you send them or train on it.
Where is my data?
On servers in the European Union: Helsinki (Finland), Nuremberg and Falkenstein (Germany). What each model processes depends on the model you choose.
Does it comply with the GDPR?
Yes. From the Professional plan on we act as data processor and sign the article 28 agreement. You'll find the text in the data processing agreement (DPA).
Do you use my conversations to train models?
We don't train models on your data. Nor do the European (EU) models, by contract. As for the non-European ones, only use them for tasks without personal data.
Can I ask you to delete my data?
Yes, by writing to [email protected]. We delete your agent's active data; the backups expire on their own within the published time limits.
Can I use free ChatGPT with customer data?
Not a good idea: many free AI services can use your conversations to improve their models. We explain it in Free AI.

Private AI for your business, from €19.99 a month

Professional plan · with a data processing agreement

  • Servers in the European Union
  • European (EU) models with zero retention
  • Every agent, isolated
  • No lock-in
14dBook your demo and get 14 days free Book a demo