DEEN

Privacy, security and AI services

Data sovereignty

Your content is stored in Germany (hosted by WeStack, a German company). AI processing takes place exclusively in the EU — with our main AI provider on infrastructure in Germany, with contractually guaranteed zero retention: inputs and outputs are processed transiently only and never stored; your data is never used for training. All data-processing contract partners have their legal domicile in the EU and are subject to European law. A data processing agreement under Art. 28 GDPR is included.

Why the applicable law matters

"EU hosting" alone is not enough: the US CLOUD Act obliges companies subject to US jurisdiction to hand over data — regardless of where the servers are located. What matters is legal domicile and control. That is why, beyond the server location, we focus on the applicable law: storage in Germany and contract partners domiciled in the EU.

Content and AI: prompt safety

Customer content (slide text, notes, alt text) is always treated as data towards the AI, never as an instruction. AI outputs are validated and, when written back into slides, re-secured. This ensures text hidden in content cannot trigger unwanted actions.

AI services in use

All providers with a European legal domicile, interchangeable:

  • Infercom (EU/Luxembourg, data centre in Germany) — language models for quiz, translation and texts; zero retention contractually guaranteed
  • KugelAudio (Berlin) — speech output (text-to-speech)
  • Stackit (Germany) — embeddings for search and knowledge features
  • DeepL (Cologne) — optional translation
  • Mistral (France) — language models
  • Mollie (Netherlands) — payment processing only

Double opt-in

For registration and e-mail sign-ups (e.g. contact requests, notifications) a double opt-in is used: you confirm your e-mail address via a link before it is actively used. This meets the GDPR's proof obligations.

Secure access

Content and files are not publicly accessible; access happens via time-limited, signed links. Sign-ins are protected by roles and rights. Requests to the help assistant are processed only to the extent necessary and deleted automatically after the retention period.