Where does your data go?
Nowhere.

Arminius AI is company AI that works right inside your company. Employees ask questions as in any chat, answers come from your own documents, and none of it leaves the building.

Contracts, prices, salaries and client names stay in your building. Not on another company’s server, not in another country.

What happens when an employee uses public AI?

Imagine posting a contract to another company so someone there can read and summarise it. They send the summary back. But they keep a copy.

That is exactly how public AI works. The question and the attached document travel over the internet to the provider’s servers. What happens to them next is no longer your decision.

They keep a copy.Conversations are stored, sometimes for years. A US court ordered millions of ChatGPT conversations to be handed over.
Someone else can get to the envelope.An attacker who breaks into the provider, or a search engine that finds a shared link.
Their country can demand it.Even when the data is stored in Europe.

How does it work with Arminius AI?

Nothing changes for employees. They ask questions as before. What changes is where the answer is computed.

1You ask

In plain language, as you would ask a colleague. You can attach a contract as a PDF or Word file, or a photo of a document.

2The appliance in your company searches

In your company’s documents that you have access to. Everything is computed on the appliance on your premises.

3You get an answer with its source

Below the answer is the document it is based on. Neither the question nor the answer leaves the building.

Six everyday situations in which companies leak data

None of these people meant any harm. They just wanted to work faster.

Jane wanted to save an hour of work

She pasted a supplier contract into a public chat to get a summary. The summary came back in seconds. The contract, however, went to another company’s server and will not come back. This is exactly how Samsung engineers leaked their own source code in 2023.

With Arminius AI: Jane has an equally convenient tool inside the company. The appliance on your premises summarises the contract.

Peter sent a colleague a link

He wanted to share a useful answer, so he sent a link to the whole conversation. A few weeks later a search engine found it. In 2025 hundreds of thousands of conversations turned up in search results this way.

With Arminius AI: Only a colleague on the company network can open the link. Nobody can reach it from the internet.

An inconspicuous e-mail arrived

It looked perfectly ordinary but contained hidden text. When the AI assistant read it, the hidden text told it to send company data out. In Microsoft 365 Copilot in 2025, the e-mail simply arriving was enough.

With Arminius AI: The services that work with your data have no internet access.

The accountant asked about salaries

She wanted the average salary of her department. The AI helpfully summarised management salaries as well, because one folder once had the wrong permissions.

With Arminius AI: Everyone sees only the documents of their own department or group. This is checked on every question, not just at sign-in.

The provider was breached

The company took security seriously, but its employees’ conversations sat with the AI provider. When the provider leaked, so did the company.

With Arminius AI: There is no provider between your people and the AI. Everything is on the appliance in your company.

A foreign authority demanded the data

The data was stored in Europe, but the provider falls under another country’s law. When that country’s authority asks, the provider has to hand it over.

With Arminius AI: The appliance is yours and stands in your company.

What you get

Employees can use AI to the full

Including contracts, prices and personal data. They do not have to think about what they may paste into a chat.

You know where your data is

On the appliance in your company. When a client, an auditor or management asks, the answer is one sentence.

Everyone sees only what is theirs

Sales sees contracts, accounting sees invoices, management sees everything. Your IT sets up the groups, taking them over from the company sign-in or creating them directly in the system.

It works without the internet

The AI computes on your premises, so an internet outage does not stop work.

How do we know it really is so?

A promise is not enough. That is why it is built so that it can be checked.

  • Monitoring keeps trying. The system continuously tries to reach the internet from the services that work with data. The attempt must fail, otherwise it reports an error.
  • Risky features are simply not there. No internet search, no agents, no code execution. What is not there cannot be misused.
  • You know who asked what. The log shows who, when and in which mode. Question text is stored only if the company turns it on.
  • The appliance is yours. It stands in your company. In system administration you see what runs and, if you enable status reporting, exactly what is sent.

What remains up to you

To be fair: no product replaces the basics of company security. Your IT takes care of these, with or without Arminius AI:

  • passwords and sign-in,
  • who is in which group (the system shows what belongs to the group),
  • employees’ computers and browsers,
  • the company’s rules for using AI.

What people ask us

How is this different from ChatGPT or Copilot?

You ask the same way, attachments included. The difference is where the answer is computed: public tools send the question and documents to the provider’s servers, Arminius AI processes them on the appliance in your company. And it knows your own documents.

Does the model send data to its maker?

No. The model is a file that runs on your appliance. It has no internet access and sends nothing. We will show you in the monitoring.

Does the AI learn from our documents?

No. The model does not change; documents are only indexed on the appliance so that search can find them, and they are cited in answers.

Does it work without the internet?

Yes. The internet is used for remote management and updates. Without it, only new statutes and decisions for the Legal module are not downloaded.

Do you have access to the appliance?

Status reporting is optional and sends only counts and states, never content. In system administration you see exactly what is sent.

Does it comply with GDPR, the AI Act and NIS2?

It helps: data stays with you, access is group-based and a query log is available. Compliance, however, is a property of the company, not of the product.

Ask us anything

The consultant answers straight away, without you having to wait for a salesperson. If you like, it can help work out what your company needs.

Arminius Chat — Consultant
Hello. What would you like to know about data security? Feel free to ask about anything that is not clear.

The AI consultant’s answers are informational and do not constitute a binding offer.